Unscored CVE-2013-2187 EUVD-2013-2144GHSA-73x4-r3fj-rwhf

Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitra…

Published Apr 22, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.

References

66991 vdb-entry
http://archiva.apache.org/security.html
20140419 [SECURITY] CVE-2013-2187: Apache Archiva Cross-Site Scripting vulnerability mailing-list
1030130 vdb-entry