CVE-2022-40309

Description

Users with write permissions to a repository can delete arbitrary directories.

Related CPE's

a apache archiva ********

References

Issue TrackingMailing ListVendor Advisory

[oss-security] 20221115 CVE-2022-40309: Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories

Mailing ListThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics

Created by Yello

About Severity.io