Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
References
- 8266 third-party-advisory
- 20110527 [SECURITY] CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability mailing-list
- 44693 third-party-advisory
- archiva-multiple-csrf(67671) vdb-entry
- 48015 vdb-entry
- http://archiva.apache.org/security.html
- 20110531 [CVE-2011-1026] Apache Archiva Multiple CSRF vulnerabilities mailing-list
- http://archiva.apache.org/docs/1.3.5/release-notes.html