Apache Archiva (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-04-30. Vendor: Apache.

CVEs of Apache Archiva

• CVE-2019-0214 - CVSS 6.5 (medium), 2019-04-30: In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing…
• CVE-2019-0213 - CVSS 6.5 (medium), 2019-04-30: In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is…