CSRF in Apache Archiva
CVE-2017-5657
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.009 (56.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Apache Archiva
- Apache Software Foundation Archiva — versions 2.1.0, 2.1.1, 1.x, 2.2.0, 2.2.1, 2.2.2
Weakness classification (CWE)
References
- security@apache.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- security@apache.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- security@apache.org (vdb-entry, x_refsource_SECTRACK)
- security@apache.org (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2017-5657?
- CVE-2017-5657 is a high-severity vulnerability in Apache Archiva, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2017-05-22.
- How severe is CVE-2017-5657?
- High severity. CVSS v3 base score is 8.0 out of 10.