Apache Archiva Cross-Site Request Forgery (CVE-2016-4469)

Apache Archiva Cross-Site Request Forgery (CVE-2016-4469)
Apache Archiva Cross-Site Request Forgery (CVE-2016-4469)

Release date:
Updated on:

Affected Systems:

Apache Group Archiva <= 1.3.9

Description:

CVE (CAN) ID: CVE-2016-4469

Archiva is a remote storage management software.

Apache Archiva 1.3.9 and earlier versions have multiple cross-site Request Forgery vulnerabilities, which allow remote attackers to hijack administrator authentication requests through multiple parameters.

<* Source: Julien Ahrens
*>

Suggestion:

Vendor patch:

Apache Group
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://archiva.apache.org/download.cgi

Refer:
Http://www.securityfocus.com/archive/1/archive/1/538877/100/0/threaded
Http://packetstormsecurity.com/files/137869/Apache-Archiva-1.3.9-Cross-Site-Request-Forgery.html

This article permanently updates the link address: