org.apache.archiva:archiva vulnerabilities (Maven)

11 vulnerabilities.

• org.apache.archiva:archiva Maven Apache Archiva: disabling user registration is not effective CVE-2024-27138 7.5 HighMarch 1, 2024
• org.apache.archiva:archiva Maven Apache Archiva: incorrect authentication potentially leading to account takeover CVE-2024-27139 7.5 HighMarch 1, 2024
• org.apache.archiva:archiva Maven Apache Archiva privilege escalation CVE-2023-28158 Fix available 6.5 MediumMarch 29, 2023
• org.apache.archiva:archiva Maven Apache Archiva Arbitrary user password reset vulnerability CVE-2022-29405 Fix available 6.5 MediumMay 25, 2022
• org.apache.archiva:archiva Maven Injection in Apache Archiva CVE-2020-9495 Public exploitFix available 5.3 MediumJune 19, 2020
• org.apache.archiva:archiva Maven Improper Input Validation in Apache Archiva CVE-2019-0214 Fix available 6.5 MediumApril 30, 2019
• org.apache.archiva:archiva Maven Cross-site scripting in Apache Archiva CVE-2019-0213 Fix available 6.5 MediumApril 30, 2019
• org.apache.archiva:archiva Maven Apache Archiva vulnerable to Cross Site Request Forgery CVE-2017-5657 Fix available 8.0 HighMay 22, 2017
• org.apache.archiva:archiva Maven Apache Archiva vulnerable to Cross-site Scripting CVE-2016-5005 Fix available 4.8 MediumJuly 28, 2016
• org.apache.archiva:archiva Maven Apache Continuum and Archiva vulnerable to Cross-site Scripting CVE-2011-0533 Fix available 4.3 MediumFebruary 17, 2011
• org.apache.archiva:archiva Maven Apache Archiva does not require entry of the administrator's password at the time of modifying a user account CVE-2010-4408 Fix available 6.8 MediumDecember 6, 2010