Sploitus

10 exploited vulnerabilities in Apache Archiva

Vulnerabilities with publicly known exploits

Vendors
Apache, Redback
With known exploits
10
Affected Apache Archiva versions
≤ 1.3.9, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2, 1.2-m1, 1.2.1, 1.2.2, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 2.2.5
Affected Jesse Mcconnell Redback versions
≤ 1.2.3, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.1.2, 1.2, 1.2.1, 1.2.2

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2016-4469 6 exploits
CVSS 8.8 HIGH 2016-07-28FIX AVAILABLE
Exploit for Cross-site Scripting in Astaro Security_Gateway_SoftwareApache Archiva 1.3.9 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2023-28158
CVSS 7.5 HIGH 2023-03-29
CVE-2022-40308
CVSS 7.5 HIGH 2022-11-15FIX AVAILABLE
CVE-2011-1026 3 exploits
CVSS 6.8 MEDIUM 2011-06-02FIX AVAILABLE
Apache Archiva 1.3.4 Cross Site ScriptingApache Archiva 1.3.4 Cross Site Request Forgery
CVE-2010-3449 4 exploits
CVSS 6.8 MEDIUM 2010-12-06FIX AVAILABLE
Apache Archiva 1.0 - 1.3.1 CSRF VulnerabilityApache Archiva 1.0 - 1.3.1 CSRF Vulnerability
CVE-2022-29405
CVSS 6.5 MEDIUM 2022-05-25FIX AVAILABLE
CVE-2020-9495 1 exploit
CVSS 5.3 MEDIUM 2020-06-19FIX AVAILABLE
Exploit for Injection in Apache Archiva
CVE-2016-5005 2 exploits
CVSS 4.8 MEDIUM 2016-07-28FIX AVAILABLE
Exploit for Cross-site Scripting in Astaro Security_Gateway_SoftwareApache Archiva 1.3.9 Cross Site Scripting
CVE-2022-40309
CVSS 4.3 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2011-1077 3 exploits
CVSS 4.3 MEDIUM 2011-06-02FIX AVAILABLE
Apache Archiva跨站脚本和HTML注入漏洞Apache Archiva 1.3.4 Cross Site Scripting