github_osv/GHSA-5hqc-x78w-3cmw
Missing Authorization in Apache Archiva
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8.
gitlab/maven/org.apache.archiva/archiva/CVE-2022-29405
Missing Authorization in Apache Archiva
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
gitlab/maven/org.apache.archiva/archiva-webapp/CVE-2022-29405
Incorrect Permission Assignment for Critical Resource
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8