Apache Software Foundation Archiva vulnerabilities

• apache archiva Apache Archiva: disabling user registration is not effective CVE-2024-27138 7.5 HighMarch 1, 2024
• apache archiva Apache Archiva: incorrect authentication potentially leading to account takeover CVE-2024-27139 7.5 HighMarch 1, 2024
• apache archiva Apache Archiva: reflected XSS CVE-2024-27140 5.4 MediumMarch 1, 2024
• apache archiva Apache Archiva privilege escalation CVE-2023-28158 Fix available 6.5 MediumMarch 29, 2023
• apache archiva Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories CVE-2022-40309 Fix available 4.3 MediumNovember 15, 2022
• apache archiva Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files CVE-2022-40308 Fix available 7.5 HighNovember 15, 2022
• apache archiva Apache Archiva Arbitrary user password reset vulnerability CVE-2022-29405 Fix available 6.5 MediumMay 25, 2022
• apache archiva Injection in Apache Archiva CVE-2020-9495 Public exploitFix available 5.3 MediumJune 19, 2020
• apache archiva Improper Input Validation in Apache Archiva CVE-2019-0214 Fix available 6.5 MediumApril 30, 2019
• apache archiva Cross-site scripting in Apache Archiva CVE-2019-0213 Fix available 6.5 MediumApril 30, 2019
• apache archiva Apache Archiva vulnerable to Cross Site Request Forgery CVE-2017-5657 Fix available 8.0 HighMay 22, 2017