Executive brief
Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
Affected products
- Maven org.apache.archiva:archiva
Junglewise Threat Intelligence
CVE-2023-28158: Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
CVE-2023-28158 · Severity: low · CVSS 3.1 · Published 2023-03-29
Technologies: org.apache.archiva:archiva (Maven). Vendors: Maven.
Related threats
- Apache Archiva Incorrect Authorization vulnerability
- Apache Archiva Incorrect Authorization vulnerability
- Missing Authorization in Apache Archiva
- Apache Archiva does not require entry of the administrator's password at the time of modifying a user account
- Apache Archiva vulnerable to Cross Site Request Forgery