GitHub Advisoryadvisory · Maven
GHSA-qf34-f43r-gv9p Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
MEDIUM
Official page ↗
- Aliases
- CVE-2023-28158
- Ecosystem
- Maven
- Packages
- org.apache.archiva:archiva
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
- Weaknesses
- CWE-79
- Reviewed
- 2023-04-05
Affected packages
• Maven org.apache.archiva:archiva: >= 2.0.0, < 2.2.10 → fixed in 2.2.10
Description
Apache Archiva is vulnerable to privilege escalation vua stored cross-site-scripting using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges, such as an admin user.
Related
Alias · CVE (1)
- CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-28158 advisory
- https://github.com/apache/archiva/commit/d62e81c7e75f617cf01d2a75952a2c857758f8c4 web
- https://github.com/apache/archiva/commit/e7f7e70992d361d8b7a3298ddcdf49dda2fdc842 web
- https://github.com/apache/archiva/commit/ee3ee0a18977b67b6997ea8cd023816201059f96 web
- https://github.com/apache/archiva package
- https://github.com/apache/archiva/releases/tag/archiva-2.2.10 web
- https://lists.apache.org/thread/8pm6d5y9cptznm0bdny3n8voovmm0dtt web
- http://www.openwall.com/lists/oss-security/2023/04/18/2 web