Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40309

Fixed upstream EPSS 1%CVSS 4.3

Users with write permissions to a repository can delete arbitrary directories.

Published 2022-11-15 · CVE record · OSV

Products: Apache Software Foundation Apache Archiva

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.archiva:archiva-common2.2.9