Apache Archiva vulnerabilities

20 CVEs affecting Apache Archiva, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27140, published 2024-03-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2251: Apache Struts Improper Input Validation Vulnerability, published 2013-07-20. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 100% chance of exploitation in the next 30 days. Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVE-2020-9495, published 2020-06-19. Medium severity, CVSS 5.3. EPSS: 8% chance of exploitation in the next 30 days. Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login…
CVE-2016-4469, published 2016-07-28. High severity, CVSS 8.8. EPSS: 7.9% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new…
CVE-2011-1077, published 2011-06-02. Medium severity, CVSS 4.3. EPSS: 7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-2187, published 2014-04-22. Medium severity, CVSS 4.3. EPSS: 5.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to…
CVE-2019-0213, published 2019-04-30. Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days. In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with…
CVE-2010-3449, published 2010-12-06. Medium severity, CVSS 6.8. EPSS: 4.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum…
CVE-2016-5005, published 2016-07-28. Medium severity, CVSS 4.8. EPSS: 4.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter…
CVE-2019-0214, published 2019-04-30. Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days. In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva…
CVE-2011-0533, published 2011-02-17. Medium severity, CVSS 4.3. EPSS: 4.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject…

Latest

CVE-2024-27140, published 2024-03-01. Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva. This issue affects Apache Archiva: from…
CVE-2024-27139, published 2024-03-01. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially…
CVE-2024-27138, published 2024-03-01. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As…
CVE-2023-28158, published 2023-03-29. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some…
CVE-2022-40309, published 2022-11-15. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Users with write permissions to a repository can delete arbitrary directories.
CVE-2022-40308, published 2022-11-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. If anonymous read enabled, it's possible to read the database file directly without logging in.
CVE-2022-29405, published 2022-05-25. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8