Unrated
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Ex...
CVE-2019-0214
First seen on SecPulse
Original description The description as published by the source.
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory archiva.apache.org
- advisory packetstormsecurity.com
- advisory openwall.com
- advisory securityfocus.com
- advisory seclists.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org