| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-0214 | 5.5 |
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesyste
|
21-07-2021 - 11:39 | 30-04-2019 - 22:29 | |
| CVE-2013-2251 | 9.3 |
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
|
20-10-2020 - 22:15 | 20-07-2013 - 03:37 | |
| CVE-2017-5657 | 6.0 |
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiv
|
16-04-2019 - 18:29 | 22-05-2017 - 18:29 | |
| CVE-2010-4408 | 6.8 |
Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gai
|
10-10-2018 - 20:08 | 06-12-2010 - 20:13 | |
| CVE-2010-3449 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remo
|
10-10-2018 - 20:02 | 06-12-2010 - 20:13 | |
| CVE-2013-2187 | 4.3 |
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.
|
09-10-2018 - 19:34 | 22-04-2014 - 14:23 | |
| CVE-2011-1077 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
09-10-2018 - 19:30 | 02-06-2011 - 20:55 | |
| CVE-2011-1026 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
|
09-10-2018 - 19:30 | 02-06-2011 - 20:55 |