Non évaluée
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Ex...
CVE-2019-0214
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory archiva.apache.org
- advisory packetstormsecurity.com
- advisory openwall.com
- advisory securityfocus.com
- advisory seclists.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org