Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 20110527 [SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability mailing-list
- 44693 third-party-advisory
- archiva-multiple-xss(67672) vdb-entry
- 20110531 [CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities mailing-list
- http://archiva.apache.org/security.html
- 8267 third-party-advisory
- 48011 vdb-entry
- http://archiva.apache.org/docs/1.3.5/release-notes.html