-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description indicates missing authorization checks (CWE-862) for directory deletion operations. While exact code/patch details are unavailable, directory deletion functionality in repository management components would logically be the attack surface. The FsStorageUtil class in Apache Archiva's common module is a reasonable candidate for filesystem operations. The medium confidence reflects the lack of direct code/patch evidence, but aligns with: 1) The CWE pattern of missing authz checks 2) Archiva's modular structure 3) Standard repository storage implementation patterns where path validation is critical.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.archiva:archiva-common | maven | < 2.2.9 | 2.2.9 |