org.apache.archiva:archiva-common

2 results · Clear filters · Feed

• Medium 5.4
  CVE-2024-27140

  Apache Archiva: reflected XSS

  ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a versio…

  Apache Software Foundation Apache Archiva org.apache.archiva:archiva-common Maven
  Mar 1, 2024
• Medium 4.3
  CVE-2022-40309

  Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories

  Users with write permissions to a repository can delete arbitrary directories.

  Apache Software Foundation Apache Archiva org.apache.archiva:archiva-common Maven
  Nov 15, 2022