CVE-2011-1077

Apache Archiva is affected by multiple cross-site scripting (XSS) vulnerabilities in versions 1.0–1.2.2 and 1.3.x before 1.3.5. The issues allow remote attackers to inject arbitrary web script or HTML via unspecified vectors; exploitation could compromise user sessions and/or perform actions with...

Apache Archiva 1.3.4 Cross Site Scripting

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...