CVE-2024-27138

An Incorrect Authorization vulnerability exists in Apache Archiva , where the security restriction intended to disable user registration can be bypassed. Because Apache Archiva has been retired , the maintainers do not expect to release a fix. Impacted users are recommended to migrate to a differ...

CVE-2024-27138 Apache Archiva: disabling user registration is not effective

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a version of Apache Archiva that fixes this issue...