{"action":"Upgrade org.apache.archiva:archiva to 2.2.4 or later.","affected":[{"fixed":"2.2.4","introduced":"2.2.0"}],"component":"org.apache.archiva:archiva","cve_ids":["CVE-2019-0214"],"ecosystem":"Maven","epss":0.04783,"exploited":false,"fixed_versions":["2.2.4"],"ghsa_id":"GHSA-jxgm-9f58-w4xp","id":"tcs_01M5N93ZCAWMM1NNG3NFY3M4GF","modified_at":"2023-11-08T04:00:31.602482Z","published_at":"2019-05-14T04:00:21Z","references":["https://osv.dev/vulnerability/GHSA-jxgm-9f58-w4xp","https://nvd.nist.gov/vuln/detail/CVE-2019-0214","https://lists.apache.org/thread.html/18b670afc2f83034f47ebeb2f797c350fe60f1f2b33c95b95f467ef8@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/239349b6dd8f66cf87a70c287b03af451dea158b776d3dfc550b4f0e@%3Cusers.maven.apache.org%3E","https://lists.apache.org/thread.html/5851cb0214f22ba681fb445870eeb6b01afd1fb614e45a22978d7dda@%3Cusers.archiva.apache.org%3E","https://lists.apache.org/thread.html/ada0052409d8a4a8c4eb2c7fd6b9cd9423bc753d5fce87eb826662fb@%3Cissues.archiva.apache.org%3E","https://seclists.org/bugtraq/2019/Apr/48","http://archiva.apache.org/security.html#CVE-2019-0214","http://packetstormsecurity.com/files/152684/Apache-Archiva-2.2.3-File-Write-Delete.html","http://www.openwall.com/lists/oss-security/2019/04/30/8","http://www.securityfocus.com/bid/108124"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-jxgm-9f58-w4xp","url":"https://osv.dev/vulnerability/GHSA-jxgm-9f58-w4xp"}],"summary":"Improper Input Validation in Apache Archiva"}