CVE-2026-73239

概要

参考情報

• allura.apache.org/posts/2026-allura-1.19.1.html · Release Notes
• lists.apache.org/thread/ryn6yomo897d43ovrd47g02t8ycmbxb3 · Mailing List
• openwall.com/lists/oss-security/2026/08/12/18 · Mailing List

allura のその他の脆弱性

• CVE-2026-75099中 5.3Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are…
• CVE-2026-73240緊急 9.8Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users ar…
• CVE-2026-73238中 6.1XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to v…
• CVE-2026-73237中 6.1XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommende…
• CVE-2026-69223緊急 9.1Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are …