CVE-2019-0214
1 advisory.
Maven/org.apache.archiva:archiva CVE-2019-0214: medium 6.5, EPSS 4.78%
Improper Input Validation in Apache Archiva
Action: Upgrade org.apache.archiva:archiva to 2.2.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.4 | - |
Fixed versions
| 2.2.4 |
Sources
- osv: GHSA-jxgm-9f58-w4xp
- https://nvd.nist.gov/vuln/detail/CVE-2019-0214
- https://lists.apache.org/thread.html/18b670afc2f83034f47ebeb2f797c350fe60f1f2b33c95b95f467ef8@%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/239349b6dd8f66cf87a70c287b03af451dea158b776d3dfc550b4f0e@%3Cusers.maven.apache.org%3E
- https://lists.apache.org/thread.html/5851cb0214f22ba681fb445870eeb6b01afd1fb614e45a22978d7dda@%3Cusers.archiva.apache.org%3E
- https://lists.apache.org/thread.html/ada0052409d8a4a8c4eb2c7fd6b9cd9423bc753d5fce87eb826662fb@%3Cissues.archiva.apache.org%3E
- https://seclists.org/bugtraq/2019/Apr/48
- http://archiva.apache.org/security.html#CVE-2019-0214
- http://packetstormsecurity.com/files/152684/Apache-Archiva-2.2.3-File-Write-Delete.html
- http://www.openwall.com/lists/oss-security/2019/04/30/8
- http://www.securityfocus.com/bid/108124
CVE-2019-0214 · published · modified · JSON