CVE-2019-0214

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism

published April 30, 2019

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04783 · 91.9th percentile
Published
2019-04-30T21:48Z
EPSS history
Timeline
  • 30 APR 21:48Z
    In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism
    cvelistv5