CVE-2011-1026

Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.

Affected products

Apache Archiva

Apache Archiva

= 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2, 1.2-m1, 1.2.1, 1.2.2, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4

Fix

Available

CVSS 2.0

6.8 MEDIUM

EPSS

2.1% (80th percentile)

Weakness

CWE-352

NVD status

Modified

Published

2011-06-02