CVE-2019-0214

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-0214
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0214.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-0214
Aliases
Published
2019-04-30T22:29:01Z
Modified
2026-10-20T10:50:33Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

References

Affected packages

Git / github.com/apache/archiva

Affected ranges

Type
GIT
Repo
https://github.com/apache/archiva
Events
Introduced
b27c14eae1314e088ff6872c34bb4b6d40b1df1f
Last Affected
d806ab411edaf73b9f03c9e939b9dfb88db04c23
Introduced
e33eddc47b2ab5096ed2e7f285a9d745d33d86b0
Last Affected
e80c3cd5293ac10e7298def6c8009b2f389d1644
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.2"
                },
                {
                    "last_affected":  "1.3.9"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0"
                },
                {
                    "last_affected":  "2.2.3"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0214.json"