Veille CVE

Recherche « Apache allura »

13 CVE

Critique 6 Élevée 1 Moyenne 6 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache allura » ✕
  1. CVE-2026-92120 9.1 Critique

    Apache Software Foundation Apache Allura

    OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue.

  2. CVE-2026-92119 9.1 Critique

    Apache Software Foundation Apache Allura

    REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue.

  3. CVE-2026-92116 9.1 Critique

    Apache Software Foundation Apache Allura

    OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue.

  4. CVE-2026-80190 6.1 Moyenne

    Apache Software Foundation Apache Allura

    Apache Allura: stored XSS via SVN code repositories.  Git repositories are not known to be affected.  The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  5. CVE-2026-81270 7.5 Élevée

    Apache Software Foundation Apache Allura

    Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  6. CVE-2026-80181 9.1 Critique

    Apache Software Foundation Apache Allura

    Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  7. CVE-2026-80180 6.1 Moyenne

    Apache Software Foundation Apache Allura

    Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

  8. CVE-2026-75099 5.3 Moyenne

    Apache Software Foundation Apache Allura · Apache allura

    Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are recommended to upgrade to version 1.20.0, which fixes the issue.

  9. CVE-2026-73240 9.8 Critique

    Apache Software Foundation Apache Allura · Apache allura

    Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

  10. CVE-2026-73239 6.5 Moyenne

    Apache Software Foundation Apache Allura · Apache allura

    Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

  11. CVE-2026-73238 6.1 Moyenne

    Apache Software Foundation Apache Allura · Apache allura

    XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

  12. CVE-2026-73237 6.1 Moyenne

    Apache Software Foundation Apache Allura · Apache allura

    XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

  13. CVE-2026-69223 9.1 Critique

    Apache Software Foundation Apache Allura · Apache allura

    Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.