CVE-2022-29405
Fixed upstream EPSS 2%
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Products: Apache Software Foundation Apache Archiva
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.archiva:archiva | 2.2.8 |