GHSA-h595-vwhc-3xwx

Suggest an improvement
Source
https://github.com/advisories/GHSA-h595-vwhc-3xwx
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-h595-vwhc-3xwx/GHSA-h595-vwhc-3xwx.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-h595-vwhc-3xwx
Aliases
  • CVE-2024-27139
Published
2024-03-01T18:30:23Z
Modified
2024-05-02T13:32:31.468417Z
Summary
Apache Archiva Incorrect Authorization vulnerability
Details

* UNSUPPORTED WHEN ASSIGNED *

Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover.

This issue affects Apache Archiva: from 2.0.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

Affected packages

Maven / org.apache.archiva:archiva

Package

Name
org.apache.archiva:archiva
View open source insights on deps.dev
Purl
pkg:maven/org.apache.archiva/archiva

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0.0
Last affected
2.2.10

Affected versions

2.*

2.0.0
2.0.1
2.1.0
2.1.1
2.2.0
2.2.1
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
2.2.10