Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-78861
HistoryNov 17, 2022 - 12:00 a.m.

Apache Archiva has an unspecified vulnerability (CNVD-2022-78861)

2022-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
apache archiva
security
vulnerability
remote repositories
write access
directory deletion
apache foundation
cnvd-2022-78861

0.001 Low

EPSS

Percentile

22.9%

Apache Archiva is a suite of software from the Apache Foundation for managing one or more remote repositories. The software provides remote Repository agents, role-based security access management, and usage reporting.A security vulnerability exists in versions of Apache Archiva prior to 2.2.9, which stems from the ability of a user with write access to the repository to delete arbitrary directories. No detailed vulnerability details are currently available.

CPENameOperatorVersion
apache apache archivalt2.2.9

0.001 Low

EPSS

Percentile

22.9%