CVE-2022-29405

In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@apache.org

Published

2022-05-25

Last modified

2024-08-03

Affected products

• Archiva (Apache)
• Apache Archiva (Apache Software Foundation)

References

• https://archiva.apache.org/docs/2.2.8/release-notes.html