CVE-2022-40309: Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories

[Olivier Lamy]

Description:

Users with write permissions to a repository can delete arbitrary directories.

Credit:

Thanks to L3yx of Syclover Security Team