Archiva@* Security Vulnerabilities and Issues — Archiva@* CVE List | Vulners.com

Lucene search

K

ApacheArchiva*

3 matches found

CVE•added 2022/05/25 8:15 a.m.•89 views

CVE-2022-29405

In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8

6.5CVSS6.4AI score0.01444EPSS

CVE•added 2022/11/15 1:15 p.m.•72 views

CVE-2022-40308

If anonymous read enabled, it's possible to read the database file directly without logging in.

7.5CVSS7.4AI score0.00184EPSS

CVE•added 2022/11/15 1:15 p.m.•64 views

CVE-2022-40309

Users with write permissions to a repository can delete arbitrary directories.

4.3CVSS4.6AI score0.00144EPSS