Insecure Direct Object Reference Vulnerability in Apache Allura by Apache

CVE-2026-73239

What is CVE-2026-73239?

The vulnerability in Apache Allura arises from inadequate permission checks for various Artifact types, leading to an Insecure Direct Object Reference (IDOR). This flaw permits unauthorized access to sensitive resources, potentially compromising user data and application integrity. Users are strongly advised to update to version 1.19.1, which addresses this critical security issue and enhances overall system security.

References