NVD

Id
85935  
Name
CVE-2017-5657  
Description
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-05-22  
Modified Date
2017-07-07  
Seq
2017-5657  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68089 JVNDB-2017-004371 Apache Archiva におけるクロスサイトリクエストフォージェリの脆弱性 Apache Archiva には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2017-5657 0 CVE-2017-5657 85935 6 8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004371.html 2017-05-16 2017-06-23 View