CVE-2011-1077: XSS
Published Jun 2, 2011
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
18 affected components
Apache Archiva=1.2.1
Apache Archiva=1.3.3
Apache Archiva=1.0.3
Apache Archiva=1.1.4
Apache Archiva=1.2
Apache Archiva=1.2.2
Apache Archiva=1.0
Apache Archiva=1.1.3
Apache Archiva=1.0.1
Apache Archiva=1.3.4
Apache Archiva=1.3
Apache Archiva=1.2-m1
Apache Archiva=1.1.2
Apache Archiva=1.1
Apache Archiva=1.3.1
Apache Archiva=1.1.1
Apache Archiva=1.0.2
Apache Archiva=1.3.2
Event History
Jun 2, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1077?
CVE-2011-1077 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-1077?
To fix CVE-2011-1077, upgrade Apache Archiva to version 1.3.5 or later.
3
Which versions of Apache Archiva are affected by CVE-2011-1077?
CVE-2011-1077 affects Apache Archiva versions from 1.0 through 1.3.4.
4
What types of attacks can be executed due to CVE-2011-1077?
CVE-2011-1077 allows attackers to conduct cross-site scripting (XSS) attacks, potentially injecting arbitrary web scripts or HTML.
5
Is there a workaround for CVE-2011-1077 if I cannot upgrade?
There are no official workarounds for CVE-2011-1077, so upgrading to a secure version is recommended.