CVE-2026-73237

概要

参考情報

• allura.apache.org/posts/2026-allura-1.19.1.html · Release Notes
• lists.apache.org/thread/p7bd1yz9v9wbsbc6hz3tjxozxnwyzqz0 · Mailing List
• openwall.com/lists/oss-security/2026/08/12/16 · Mailing List

allura のその他の脆弱性

• CVE-2026-75099中 5.3Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are…
• CVE-2026-73240緊急 9.8Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users ar…
• CVE-2026-73239中 6.5Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects A…
• CVE-2026-73238中 6.1XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to v…
• CVE-2026-69223緊急 9.1Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are …