{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0","last_affected":"2.2.10"}],"component":"org.apache.archiva:archiva-common","cve_ids":["CVE-2024-27140"],"ecosystem":"Maven","epss":0.01341,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hp2x-6vrm-7j7v","id":"tcs_01M5N9109N3VRMMWAZYGPBNZVT","modified_at":"2025-02-13T19:33:05.841695Z","published_at":"2024-03-01T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-hp2x-6vrm-7j7v","https://nvd.nist.gov/vuln/detail/CVE-2024-27140","https://attic.apache.org/projects/archiva.html","https://github.com/apache/archiva","https://lists.apache.org/thread/xrn6nt904ozh3jym60c3f5hj2fb75pjy","http://www.openwall.com/lists/oss-security/2024/03/01/2"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hp2x-6vrm-7j7v","url":"https://osv.dev/vulnerability/GHSA-hp2x-6vrm-7j7v"}],"summary":"Apache Archiva Reflected Cross-site Scripting vulnerability"}