CVE-2016-5005

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
4.8MEDIUM
EPSS
0.5%
top 32.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Archiva
Timeline
PublishedJul 28
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitability: 1.7 | Impact: 2.7

Affected Packages2 packages

▶NVDapache/archiva1.3.9

🔴Vulnerability Details

3
GHSA
Apache Archiva vulnerable to Cross-site Scripting↗2022-05-14
▶
OSV
Apache Archiva vulnerable to Cross-site Scripting↗2022-05-14
▶
CVEList
CVE-2016-5005: Cross-site scripting (XSS) vulnerability in Apache Archiva 1↗2016-07-28
▶
CVE-2016-5005 (MEDIUM CVSS 4.8) | Cross-site scripting (XSS) vulnerab | cvebase.io