CVE-2019-0214

Description

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

1.71

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-0213,CVE-2019-0214 are fixed in Apache-archiva 2.2.4	Windows
Vulnerabilities CVE-2019-0213,CVE-2019-0214 are fixed in Apache-archiva for Linux 2.2.4	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234