5 matches found
CVE-2023-28158
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user...
CVE-2023-28158
CVE-2023-28158 – Apache Archiva privilege escalation via stored XSS . Affected software: Apache Archiva 2.x earlier than 2.2.10. Vulnerable component | behavior: stored cross-site scripting through the file upload service; authenticated users can craft directory names to inject XSS content, poten...
CVE-2023-28158 Apache Archiva privilege escalation
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user...
CVE-2023-28158 Apache Archiva privilege escalation
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user...
CVE-2023-28158 Apache Archiva privilege escalation
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user...