Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Apache Allura 1.19.1 Clear all filters
TI-2026-51374 CVE-2026-73237 · GHSA-q6fp-vfv9-v477

Apache Allura: XSS in markdown pipeline

Priority LOW 29

XSS vulnerability in Markdown handling in Apache Allura.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00794 Published 2026-08-12 Fixed in 1.19.1 CWE-80
TI-2026-51375 CVE-2026-73238 · GHSA-26cw-37ff-mmw4

Apache Allura: XSS in code display

Priority LOW 29

XSS vulnerability in code display in Apache Allura.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00794 Published 2026-08-12 Fixed in 1.19.1 CWE-80
TI-2026-51376 CVE-2026-73239 · GHSA-mjpp-gw39-h7mj

Apache Allura: Missing permission checks IDOR

Priority LOW 30

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00622 Published 2026-08-12 Fixed in 1.19.1 CWE-280
TI-2026-51377 CVE-2026-73240 · GHSA-29mg-2cr6-59xc

Apache Allura: Git command injection

Priority MEDIUM 51

Specifically crafted inputs may lead to git argument injection in Apache Allura.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01043 Published 2026-08-12 Fixed in 1.19.1 CWE-88