Description
Users with write permissions to a repository can delete arbitrary directories.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/11/15/3
https://lists.apache.org/thread/1odl4p85r96n27k577jk6ftrp19xfc27
Related Vulnerabilities
CVE-2020-35451 Vulnerability in maven package org.apache.oozie:oozie-tools
CVE-2020-26237 Vulnerability in maven package org.webjars.npm:highlight.js
CVE-2020-10758 Vulnerability in maven package org.keycloak:keycloak-wildfly-server-subsystem
CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils
CVE-2020-9488 Vulnerability in maven package org.apache.logging.log4j:log4j-core