Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Archiva跨站脚本攻击漏洞
Vulnerability Description
Apache Archiva 是一个管理一个和多个远程存储的软件。 Apache Archiva 1.0至1.0.3版本，1.1至1.1.4版本，1.2至1.2.2版本，以及1.3至1.3.1版本在修改用户账户时不需要管理员的密码输入。上下文攻击者更容易通过利用(1)无人值守的工作站或者(2)跨站请求伪造漏洞获取特权。
CVSS Information
N/A
Vulnerability Type
N/A