• info
• discussion
• exploit
• solution
• references

Apache Archiva Multiple Cross Site Request Forgery Vulnerabilities

Apache Archiva is prone to multiple cross-site request-forgery vulnerabilities.

Exploiting these issues may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible.

Apache Archiva versions 1.3.0 to 1.3.4 are vulnerable.