CVE-2019-0214

—

CVSS 3.0

6.5 medium

EPSS

5%p91

Published

Apr 30, 2019 (Apr 30, 2019)

Modified

Jun 17, 2026

Description

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

Vendors: apache
Products: archiva
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news0 stories

No ingested article mentions this CVE yet.