CVE-2023-28158
Apache Archiva privilege escalation
Résumé
Apache Archiva privilege escalation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Privilege escalation via stored XSS using the file upload service to upload malicious content.
The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com