CVE-2024-27140

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. Alternatively, you could configure a HTTP proxy in front of your Archiva instance to only forward requests that do not have malicious characters in the URL. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-79

• http://www.openwall.com/lists/oss-security/2024/03/01/2Mailing List
• https://lists.apache.org/thread/xrn6nt904ozh3jym60c3f5hj2fb75pjyMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/03/01/2Mailing List
• https://lists.apache.org/thread/xrn6nt904ozh3jym60c3f5hj2fb75pjyMailing List, Vendor Advisory

Published

Mar 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27135Improper input validation in the Pulsar Function Worker allo…9.9
• CVE-2024-27136XSS in Upload page in Apache JSPWiki 2.12.1 and priors allow…6.1
• CVE-2024-27137In Apache Cassandra it is possible for a local attacker with…5.3
• CVE-2024-27138** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vuln…7.5
• CVE-2024-27139** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vul…7.5
• CVE-2024-2714A vulnerability has been found in Campcodes Complete Online …6.5
• CVE-2024-27141Toshiba printers use XML communication for the API endpoint …5.9
• CVE-2024-27142Toshiba printers use XML communication for the API endpoint …5.9
• CVE-2024-27143Toshiba printers use SNMP for configuration. Using the priva…9.8
• CVE-2024-27144The Toshiba printers provide several ways to upload files us…9.8
• CVE-2024-27145The Toshiba printers provide several ways to upload files us…9.8
• CVE-2024-27146The Toshiba printers do not implement privileges separation.…6.7