未評価
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerabilit...
CVE-2019-0213
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory archiva.apache.org
- advisory packetstormsecurity.com
- advisory openwall.com
- advisory securityfocus.com
- advisory seclists.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org