Apache Archiva vulnerabilities

2 known vulnerabilities in Apache Archiva from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Archiva: Incorrect Authorization

  CVE-2024-27139Mar 1, 2024ApacheEPSS 1.33%

  ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: fr

• 7.5 High severity

  Apache Archiva: Incorrect Authorization

  CVE-2024-27138Mar 1, 2024ApacheEPSS 1.19%

  ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a vers