Posted by Deng Ching on May 27
CVE-2011-1077: Apache Archiva Multiple XSS vulnerability
Severity: High
Vendor:
The Apache Software Foundation
Versions Affected:
Archiva 1.3.0 – 1.3.4
The unsupported versions Archiva 1.0 – 1.2.2 are also affected.
Description:
The multiple XSS issues found are both Stored (Persistent) and
Reflected (Non-Persistent). Javascript which might contain malicious
code can be appended in a request parameter or stored as a value in a
submitted form,…
Source: [SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability