CVE-2023-28158
Apache Archiva privilege escalation
概要
Apache Archiva privilege escalation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Privilege escalation via stored XSS using the file upload service to upload malicious content.
The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com