UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva.
Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a version of Apache Archiva that fixes this issue. You are recommended to look into migrating to a different solution, or isolate your instance from any untrusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer
[
{
"cpes": [
"cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*"
],
"vendor": "apache",
"product": "archiva",
"versions": [
{
"status": "affected",
"version": "2.0.0",
"versionType": "semver",
"lessThanOrEqual": "*"
}
],
"defaultStatus": "unaffected"
}
]