Skip to contentApache Software Foundation Allura vulnerabilities
- apache software foundation alluraApache Allura: OAuth1 rebindingCVE-2026-1181969.1 Critical
- apache software foundation alluraApache Allura: Oauth1 Replay AttackCVE-2026-921209.1 Critical
- apache software foundation alluraApache Allura: REST API Mass AssignmentCVE-2026-921199.1 Critical
- apache software foundation alluraApache Allura: OAuth1 missing callback validationCVE-2026-921169.1 Critical
- apache software foundation alluraApache Allura: Stored XSS via code repositoriesCVE-2026-801906.1 Medium
- apache software foundation alluraApache Allura: Information exposure via searchCVE-2026-812707.5 High
- apache software foundation alluraApache Allura: Server-side request forgeryCVE-2026-801819.1 Critical
- apache software foundation alluraApache Allura: Stored XSS via markdown HTML processingCVE-2026-801806.1 Medium
- apache alluraApache Allura: Unauthenticated REST disclosureCVE-2026-750995.3 Medium
- apache alluraApache Allura: XSS in markdown pipelineCVE-2026-732376.1 Medium
- apache alluraApache Allura: XSS in code displayCVE-2026-732386.1 Medium
- apache alluraApache Allura: Missing permission checks IDORCVE-2026-732396.5 Medium
- apache alluraApache Allura: Git command injectionCVE-2026-732409.8 Critical
- apache alluraApache Allura: Server-side request forgeryCVE-2026-692239.1 Critical
- apache alluraApache Allura: Stored authenticated XSSCVE-2024-383794.8 Medium
- apache alluraApache Allura: sensitive information exposure via DNS rebindingCVE-2024-364717.5 High
- apache alluraApache Allura: sensitive information exposure via importCVE-2023-468514.9 Medium
- apache alluraIn Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown...CVE-2019-100856.1 Medium
- apache alluraIn Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If...CVE-2018-13196.1 Medium
- apache alluraIn Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the...CVE-2018-12997.5 High