Description
Users with write permissions to a repository can delete arbitrary directories.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/11/15/3
https://lists.apache.org/thread/1odl4p85r96n27k577jk6ftrp19xfc27
Related Vulnerabilities
CVE-2022-30506 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2019-12043 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:remarkable
CVE-2022-25878 Vulnerability in npm package protobufjs
CVE-2019-14653 Vulnerability in npm package editor.md
CVE-2021-39231 Vulnerability in maven package org.apache.ozone:ozone-main