EUVD-2022-4130

Malicious code in bioql PyPI...

CVE-2017-5657

Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery CSRF attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active...

CVE-2017-5657

Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery CSRF attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active...

CVE-2017-5657: Cross-Site Request Forgery (CSRF)

Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery CSRF attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active...

PT-2017-16651

Name of the Vulnerable Software and Affected Versions Apache Archiva affected versions not specified Description The issue concerns several REST service endpoints of Apache Archiva that are not protected against Cross Site Request Forgery CSRF attacks. This means a malicious site, opened in the...