Apache Software Foundation Apache Archiva

• CVE-2024-27138 High 7.5 Apache Archiva: disabling user registration is not effective 1.2%
• CVE-2024-27139 High 7.5 Apache Archiva: incorrect authentication potentially leading to account takeover 1.3%
• CVE-2024-27140 Medium 5.4 Apache Archiva: reflected XSS 1.3%
• CVE-2023-28158 Medium 6.5 Apache Archiva privilege escalation 1.2%
• CVE-2022-40308 High 7.5 Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files 1.3%
• CVE-2022-40309 Medium 4.3 Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories 1.5%
• CVE-2022-29405 Unrated Apache Archiva Arbitrary user password reset vulnerability 1.7%