CVE-2022-29405

Description

In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8

Affected Platforms

Weakness Type

NVD-CWE-noinfo

References

• https://archiva.apache.org/docs/2.2.8/release-notes.html
• https://archiva.apache.org/docs/2.2.8/release-notes.html