PT-2022-25340 · Apache · Apache Archiva

Name of the Vulnerable Software and Affected Versions: Apache Archiva versions prior to 2.2.9 Description: The issue allows an anonymous user to read arbitrary files, including the database file, directly without logging in if anonymous read is enabled. Recommendations: For Apache Archiva version...