Cross-site scripting (XSS) vulnerability in Apache Archiva prior to version 2.2.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
{ "nvd_published_at": "2016-07-28T16:59:00Z", "github_reviewed_at": "2022-11-22T18:47:52Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }