CVE-2026-73237

Mô tả

Tham khảo

• allura.apache.org/posts/2026-allura-1.19.1.html · Release Notes
• lists.apache.org/thread/p7bd1yz9v9wbsbc6hz3tjxozxnwyzqz0 · Mailing List
• openwall.com/lists/oss-security/2026/08/12/16 · Mailing List

Lỗ hổng khác của allura

• CVE-2026-75099TRUNG BÌNH 5.3Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are…
• CVE-2026-73240NGHIÊM TRỌNG 9.8Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users ar…
• CVE-2026-73239TRUNG BÌNH 6.5Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects A…
• CVE-2026-73238TRUNG BÌNH 6.1XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to v…
• CVE-2026-69223NGHIÊM TRỌNG 9.1Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are …