CVE-2011-1026
02.06.2011, 20:55
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | archiva | 1.0 |
| apache | archiva | 1.0.1 |
| apache | archiva | 1.0.2 |
| apache | archiva | 1.0.3 |
| apache | archiva | 1.1 |
| apache | archiva | 1.1.1 |
| apache | archiva | 1.1.2 |
| apache | archiva | 1.1.3 |
| apache | archiva | 1.1.4 |
| apache | archiva | 1.2 |
| apache | archiva | 1.2-m1 |
| apache | archiva | 1.2.1 |
| apache | archiva | 1.2.2 |
| apache | archiva | 1.3 |
| apache | archiva | 1.3.1 |
| apache | archiva | 1.3.2 |
| apache | archiva | 1.3.3 |
| apache | archiva | 1.3.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References