CVE-2022-29405
Apache Archiva Arbitrary user password reset vulnerability
Résumé
Apache Archiva Arbitrary user password reset vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web archiva.apache.org