CVE-2022-29405
Apache Archiva Arbitrary user password reset vulnerability
Summary
Apache Archiva Arbitrary user password reset vulnerability
Original description
The description as published by the source.
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web archiva.apache.org