Apache Archiva privilege escalation
CVE-2023-28158

5.4MEDIUM

Key Information:

Vendor

Apache
Status
Apache Archiva
Vendor
CVE Published:
29 March 2023

What is CVE-2023-28158?

Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.

Affected Version(s)

Apache Archiva 2.0 < 2.2.10

References

https://lists.apache.org/thread/8pm6d5y9cptznm0bdny3n8voo...
vendor-advisory
http://www.openwall.com/lists/oss-security/2023/04/18/2

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

sandr0 (sandr0.xyz)
.