Archiva vulnerabilities

3 known vulnerabilities in Archiva from Apache. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Archiva: Incorrect Authorization

  CVE-2024-27139Mar 1, 2024ApacheEPSS 1.33%

  ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: fr

• 7.5 High severity

  Apache Archiva: Incorrect Authorization

  CVE-2024-27138Mar 1, 2024ApacheEPSS 1.19%

  ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a vers

• 9.8 Critical severity

  Apache Struts Improper Input Validation Exploited

  CVE-2013-2251Jul 20, 2013ApacheEPSS 100%

  Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.