Veille CVE

Semaine du 31 août au 6 septembre 2026

4 CVE

Critique 1 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache Software Foundation Apache Allura » ✕
  1. CVE-2026-80190 6.1 Moyenne

    Apache Software Foundation Apache Allura

    Apache Allura: stored XSS via SVN code repositories.  Git repositories are not known to be affected.  The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  2. CVE-2026-81270 7.5 Élevée

    Apache Software Foundation Apache Allura

    Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  3. CVE-2026-80181 9.1 Critique

    Apache Software Foundation Apache Allura

    Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  4. CVE-2026-80180 6.1 Moyenne

    Apache Software Foundation Apache Allura

    Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.