CVE-2026-75099

概要

参考情報

• lists.apache.org/thread/lnsfx58o6mx6m44qk4vzqrq8ccmrywcy · Mailing List
• openwall.com/lists/oss-security/2026/08/24/6 · Mailing List

allura のその他の脆弱性

• CVE-2026-73240緊急 9.8Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users ar…
• CVE-2026-73239中 6.5Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects A…
• CVE-2026-73238中 6.1XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to v…
• CVE-2026-73237中 6.1XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommende…
• CVE-2026-69223緊急 9.1Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are …