Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3449. PoCs published by Anatolia Security.
AI-analyzed exploit summary This is a proof-of-concept for a CSRF vulnerability in Apache Archiva that allows an attacker to change the administrator's credentials by tricking them into visiting a malicious page. The exploit submits a crafted form to the target application without requiring authentication.
Description
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.
Exploits (1)
This is a proof-of-concept for a CSRF vulnerability in Apache Archiva that allows an attacker to change the administrator's credentials by tricking them into visiting a malicious page. The exploit submits a crafted form to the target application without requiring authentication.