Apache Archiva Multiple XSS & CSRF Vulnerabilities May 30, 2011 in security research, appsec, apache archiva Multiple XSS and CSRF issues in Apache Archiva version 1.3.4. Disclosure blogpost. Continue reading