CVE-2022-29405: Missing Authorization in Apache Archiva
(updated )
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
References
Detect and mitigate CVE-2022-29405 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →