Apache Allura Vulnerabilities

Apache Apache Allura vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 August 2026

XSS Vulnerability in Apache Allura Markdown Handling
CVE-2026-73237
ApacheApache Allura6.1MEDIUM
XSS Vulnerability in Apache Allura Affects User Code Display
CVE-2026-73238
ApacheApache Allura6.1MEDIUM
Insecure Direct Object Reference Vulnerability in Apache Allura by Apache
CVE-2026-73239
ApacheApache Allura
Git Argument Injection Vulnerability in Apache Allura by Apache
CVE-2026-73240
ApacheApache Allura

11 August 2026

Server-Side Request Forgery Vulnerability in Apache Allura
CVE-2026-69223
ApacheApache Allura

22 June 2024

Allura's Neighborhood Settings Vulnerable to Stored XSS Attack
CVE-2024-38379
ApacheApache Allura4.8MEDIUM

10 June 2024

DNS Rebinding Vulnerability Affects Apache Allura Versions 1.0.1-1.16.0
CVE-2024-36471
ApacheApache Allura

7 November 2023

Apache Allura: sensitive information exposure via import
CVE-2023-46851
ApacheApache Allura4.9MEDIUM

19 June 2019

Stored XSS Vulnerability in Apache Allura Affecting User Dropdown Selector
CVE-2019-10085
ApacheApache Allura6.1MEDIUM

15 March 2018

HTTP Response Splitting Vulnerability in Apache Allura
CVE-2018-1319
ApacheApache Allura6.1MEDIUM

6 February 2018

Directory Traversal Vulnerability in Apache Allura Web Application
CVE-2018-1299
ApacheApache Allura7.5HIGH