CVE-2019-0213: XSS
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0213?
CVE-2019-0213 is considered to have a minor risk level as it can only be exploited by users with admin roles.
How do I fix CVE-2019-0213?
To fix CVE-2019-0213, upgrade Apache Archiva to version 2.2.4 or later.
Who is affected by CVE-2019-0213?
CVE-2019-0213 affects users of Apache Archiva prior to version 2.2.4.
What type of vulnerability is CVE-2019-0213?
CVE-2019-0213 is a cross-site scripting (XSS) vulnerability.
What can an attacker do with CVE-2019-0213?
An attacker with admin privileges could potentially store malicious XSS code in the configuration entries of Apache Archiva.