CVE-2019-0214

Vulnerability

CVE-2019-0214 is a critical vulnerability in Apache Archiva versions 2.0.0 through 2.2.3. The artifact upload mechanism lacks proper validation of file paths, allowing an attacker to write files to arbitrary locations on the server. This flaw can also be used to overwrite existing files, provided the Archiva run user has the necessary file system permissions [1][4].

Exploitation

No authentication is required to exploit this vulnerability; any user capable of uploading artifacts can leverage it. By crafting a malicious artifact with a path traversal payload, the attacker can direct the file write to any directory the Archiva service account can write to. This may include configuration directories, application binaries, or any other sensitive location [1][3].

Impact

Successful exploitation grants an attacker the ability to overwrite critical files, potentially leading to remote code execution (e.g., by overwriting JSP files or configuration), privilege escalation, or denial of service. The impact is limited only by the file system permissions of the Archiva process [1][4].

Mitigation

The Apache Archiva project has addressed this vulnerability in version 2.2.4, which introduces additional validation to prevent malicious parameter values. Users are strongly advised to upgrade immediately. No workaround is available other than upgrading [3][4].