Skip to content

Vendor

com.reposilite vulnerabilities

3 published CVES affecting com.reposilite, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of com.reposilite alerts

Products

Latest com.reposilite CVEs

Newest publication first

  1. CVE-2024-36117 Path traversal while serving Reposilite javadoc expanded files

    Published
    HighCVSS 7.5 EPSS 3.1%

    Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this i...

  2. CVE-2024-36116 Path traversal in Reposilite javadoc file expansion

    Published
    CriticalCVSS 9.8 EPSS 1.5%

    Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite provides support for JavaDocs files, which are archives that contain documentation for artifacts. Specifically, JavadocEndpoints.kt controller allow...

  3. CVE-2024-36115 Stored Cross site scripting in Reposilite artifacts

    Published
    HighCVSS 7.1 EPSS 0.84%

    Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. T...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.