PT-2016-6215

Name of the Vulnerable Software and Affected Versions Apache Archiva versions 1.3.9 and earlier Apache Archiva versions prior to 2.2.1 Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId...

PT-2016-5965

Name of the Vulnerable Software and Affected Versions Apache Archiva versions 1.3.9 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including adding new repository proxy connectors via the "admin/addProxyConnector...