CVE-2011-1077 Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache archiva | = 1.0 | No fix listed |
| apache archiva | = 1.0.1 | No fix listed |
| apache archiva | = 1.0.2 | No fix listed |
| apache archiva | = 1.0.3 | No fix listed |
| apache archiva | = 1.1 | No fix listed |
| apache archiva | = 1.1.1 | No fix listed |
| apache archiva | = 1.1.2 | No fix listed |
| apache archiva | = 1.1.3 | No fix listed |
| apache archiva | = 1.1.4 | No fix listed |
| apache archiva | = 1.2 | No fix listed |
| apache archiva | = 1.2-m1 | No fix listed |
| apache archiva | = 1.2.1 | No fix listed |
| apache archiva | = 1.2.2 | No fix listed |
| apache archiva | = 1.3 | No fix listed |
| apache archiva | = 1.3.1 | No fix listed |
| apache archiva | = 1.3.2 | No fix listed |
| apache archiva | = 1.3.3 | No fix listed |
| apache archiva | = 1.3.4 | No fix listed |
References
- archiva.apache.org
- archiva.apache.org vendor-advisory
- 20110531 [CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities exploit mailing-list
- 44693 third-party-advisory vendor-advisory
- 8267 third-party-advisory
- 20110527 [SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability mailing-list
- 48011 vdb-entry
- archiva-multiple-xss(67672) vdb-entry