Apache Archiva
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:apache_archiva:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Apache Archiva (f48308e8-e824-5a7a-9f88-b37de97d4cf8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0214 |
vulnerable | 2026-06-08 05:12:19.336523 |
Details available
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Published: 2019-04-30T21:48:54.000Z
Updated: 2024-08-04T17:44:14.813Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0213 |
vulnerable | 2026-06-08 05:12:19.334883 |
Details available
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
Published: 2019-04-30T21:35:47.000Z
Updated: 2024-08-04T17:44:14.810Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.