Apache Archiva is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible. The following versions are affected: Archiva versions 1.0 through 1.0.3 Archiva versions 1.1 through 1.1.4 Archiva versions 1.2 through 1.2.2 Archiva versions 1.3 through 1.3.1

Updates are available. Please see the reference for more details.

• http://archiva.apache.org/docs/1.3.2/release-notes.html
• http://archiva.apache.org/download.html
• http://jira.codehaus.org/browse/MRM-1438
• https://www.securityfocus.com/bid/45095

---

Updated on 2015-03-25