Posted by Walikar Riyaz Ahemed Dawalmalik on May 30
Hi,
This is regarding multiple XSS (Cross Site Scripting) Vulnerabilities in
Apache Archiva 1.3.4 (and previous versions). The following is the
disclosure document
Project: Apache Archiva
Severity: High
Versions: 1.3.0 – 1.3.4. The unsupported versions Archiva 1.0 – 1.2.2
are also affected.
Exploit type: Multiple XSS
Mitigation: Archiva 1.3.4 and earlier users should upgrade to 1.3.5
Vendor URL: http://archiva.apache.org/security.html
CVE:…
Source: [CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities
