apache/archiva Security Advisories | GitStock

high2024-03-01

Apache Archiva Incorrect Authorization vulnerability

GHSA-rv4h-m4wc-v99w · CVE-2024-27138

medium2024-03-01

Apache Archiva Reflected Cross-site Scripting vulnerability

GHSA-hp2x-6vrm-7j7v · CVE-2024-27140

high2024-03-01

Apache Archiva Incorrect Authorization vulnerability

GHSA-h595-vwhc-3xwx · CVE-2024-27139

medium2023-03-29

Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)

GHSA-qf34-f43r-gv9p · CVE-2023-28158

medium2022-11-15

Apache Archiva subject to arbitrary directory deletion by users.

GHSA-xgq8-jq9w-77r5 · CVE-2022-40309

high2022-11-15

Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user

GHSA-463w-hxfv-g9f6 · CVE-2022-40308

medium2022-05-14

Apache Archiva does not require entry of the administrator's password at the time of modifying a user account

GHSA-5p54-jj38-3hxj · CVE-2010-4408

high2022-05-14

Apache Archiva vulnerable to Cross Site Request Forgery

GHSA-hf4p-mhc8-x2gp · CVE-2017-5657

medium2022-05-14

Apache Archiva vulnerable to Cross-site Scripting

GHSA-8jfm-rgmg-3wq2 · CVE-2016-5005