WaratekVRT Sign in

Archiva CVEs

15 CVEs, 1 exploited, 1 protected by Waratek

Reset
More filters (1)
Columns
Product archiva✕
Overview 15 matches · 1 protected · 1 exploited · 1 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
15matches 1protected6.7% 1exploited6.7% 1CISA KEV6.7% 2public PoC13.3% 1EPSS ≥ 0.56.7%
Protected by Waratek 1 6.7% Rule in development 0 0.0% Mitigation candidate 1 6.7% No exploit published 13 86.7%
Critical 1 6.7% High 4 26.7% Medium 10 66.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 6.7% partly blocked 0 0.0% not blocked 14 93.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 6.7% Working exploit published 0 0.0% Proof of concept only 1 6.7% Forecast only 0 0.0% No public exploit 13 86.7%
split by peak 3 / year
No exploit published: 13Mitigation candidate: 1Protected by Waratek: 1 Medium: 10High: 4Critical: 1 not blocked: 14blocked by ARMR today: 1 No public exploit: 13Proof of concept only: 1Exploited: 1
20101 No exploit published1 Medium1 not blocked1 No public exploit1 20111 No exploit published1 Medium1 not blocked1 No public exploit1 20120 20131 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20140 20150 20161 No exploit published1 Medium1 not blocked1 No public exploit1 20171 No exploit published1 High1 not blocked1 No public exploit1 20180 20192 No exploit published2 Medium2 not blocked2 No public exploit2 20201 Mitigation candidate1 Medium1 not blocked1 Proof of concept only1 20210 20223 No exploit published3 High1 Medium2 not blocked3 No public exploit3 20231 No exploit published1 Medium1 not blocked1 No public exploit1 20243 No exploit published3 High2 Medium1 not blocked3 No public exploit3
20102012201420162018202020222024
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-27140 Medium 2024-03-01 No exploit published No public exploit ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. Alternatively, you could configure a HTTP proxy in front of your Archiva instance to only forward requests that do not have malicious characters in the URL. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2024-27139 High 2024-03-01 No exploit published No public exploit ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2024-27138 High 2024-03-01 No exploit published No public exploit ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a version of Apache Archiva that fixes this issue. You are recommended to look into migrating to a different solution, or isolate your instance from any untrusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2023-28158 Medium 2023-03-29 No exploit published No public exploit Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
CVE-2022-40309 Medium 2022-11-15 No exploit published No public exploit Users with write permissions to a repository can delete arbitrary directories.
CVE-2022-40308 High 2022-11-15 No exploit published No public exploit If anonymous read enabled, it's possible to read the database file directly without logging in.
CVE-2022-29405 Medium 2022-05-25 No exploit published No public exploit In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
CVE-2020-9495 Medium 2020-06-19 Mitigation candidate Proof of concept only Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.
CVE-2019-0214 Medium 2019-04-30 No exploit published No public exploit In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
CVE-2019-0213 Medium 2019-04-30 No exploit published No public exploit In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
CVE-2017-5657 High 2017-05-22 No exploit published No public exploit Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).
CVE-2016-5005 Medium 2016-07-28 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
CVE-2013-2251 Critical 2013-07-20 Protected by Waratek Exploited Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVE-2011-0533 Medium 2011-02-17 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.
CVE-2010-4408 Medium 2010-12-06 No exploit published No public exploit Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.