vulnwire
8.8high

CVE-2016-44691 exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authent…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.9%
percentile 95%
Public exploits
1
Exploit-DB

Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin/addProxyConnector_commit.action, (2) new repositories via the token parameter to admin/addRepository_commit.action, (3) edit existing repositories via the token parameter to admin/editRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin/addLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin/saveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.

Exploit prediction (EPSS)

7.86% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-40109 Apache Archiva 1.3.9 - Multiple Cross-Site Request Forgery Vulnerabilities · webapps · 2016-07-13

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness

References

  • packetstormsecurity.com /files/137869/Apache-Archiva-1.3.9-Cross-Site-Request-Forgery.html · x_refsource_MISC, x_transferred
  • seclists.org /fulldisclosure/2016/Jul/37 · mailing-list, x_refsource_FULLDISC, x_transferred
  • securitytracker.com /id/1036475 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /archive/1/538877/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/91703 · vdb-entry, x_refsource_BID, x_transferred
  • exploit-db.com /exploits/40109/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • lists.apache.org /thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar. · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.