Incorrect Authorization

org.apache.archiva:archiva is vulnerable to Incorrect Authorization. The vulnerability is due to unauthorized users being able to register when registration is set to be disabled. This flaw potentially leads to an Access Restriction Bypass...

org.apache.archiva:archiva-configuration (1.2.1), org.apache.archiva:archiva-consumer-api (1.2.1) +32 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.2.1)

org.apache.archiva:archiva-common MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.2.1 - org.apache.archiva:archiva-consumer-api 1.2....

org.apache.archiva:archiva-configuration (1.1.1), org.apache.archiva:archiva-consumer-api (1.1.1) +10 more potentially affected by CVE-2022-40308 via org.apache.archiva:archiva-common (1.1.1)

org.apache.archiva:archiva-common MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.1.1 - org.apache.archiva:archiva-consumer-api 1.1....

org.apache.archiva:archiva-configuration (1.1.1), org.apache.archiva:archiva-consumer-api (1.1.1) +10 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.1.1)

org.apache.archiva:archiva-common MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.1.1 - org.apache.archiva:archiva-consumer-api 1.1....

org.apache.archiva:archiva-artifact-converter (1.4-m1), org.apache.archiva:archiva-checksum (1.4-m1) +24 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.4-m1)

org.apache.archiva:archiva-common MAVEN version 1.4-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-artifact-converter 1.4-m1 - org.apache.archiva:archiva-checksum...