CVE-2026-80181— Apache Allura: Server-side request forgery
Quick assessment
Affected
Apache Software Foundation Apache Allura
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Allura 的 Webhooks 功能存在服务器端请求伪造（SSRF）漏洞。 该漏洞影响 Apache Allura 1.20.0 及更早版本。 建议用户升级至 1.21.0 或更高版本，该版本已修复此问题。
Possible ATT&CK Techniques 1 AI
T1090 · ProxyAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache Allura | ≤ 1.20.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-80181
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Allura: Server-side request forgery
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).
This issue affects Apache Allura: through 1.20.0.
Users are recommended to upgrade to version 1.21.0, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Allura | 0 ~ 1.20.0 | - |
|
II. Public POCs for CVE-2026-80181
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-80181
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-80181 (1)
Same Patch Batch · Apache Software Foundation · 2026-09-04 · 7 CVEs total
| CVE-2026-80180 | Apache Allura: Stored XSS via markdown HTML processing | |
| CVE-2026-71216 | Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over clearte | |
| CVE-2026-81270 | Apache Allura: Information exposure via search | |
| CVE-2026-85229 | Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CV | |
| CVE-2026-80190 | Apache Allura: Stored XSS via code repositories | |
| CVE-2026-52691 | Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Module |
IV. Related Vulnerabilities
Same product: Apache Allura
-
CVE-2026-80190
Apache Allura: Stored XSS via code repositories -
CVE-2026-81270
Apache Allura: Information exposure via search -
CVE-2026-80180
Apache Allura: Stored XSS via markdown HTML processing -
CVE-2026-75099
Apache Allura: Unauthenticated REST disclosure -
CVE-2026-73237
Apache Allura: XSS in markdown pipeline
Same vendor: Apache Software Foundation
-
CVE-2026-78254
Apache Ant: Path traversal in ftp and scp tasks allows arbit -
CVE-2026-52691
Apache Griffin Hive Metastore Module: SQL Injection Vulnerab -
CVE-2026-80190
Apache Allura: Stored XSS via code repositories -
CVE-2026-85229
Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard -
CVE-2026-81270
Apache Allura: Information exposure via search
Same weakness: CWE-918
-
CVE-2026-86273
projeto-siga HTML-to-PDF Endpoint ExUtilController.java Down -
CVE-2026-86240
liufee FeehiCMS UEditor Uploader.php catchImage server-side -
CVE-2026-86237
openagents-org openagents http.py test_default_model server- -
CVE-2026-86259
OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validat -
CVE-2026-86173
MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
V. Comments for CVE-2026-80181
No comments yet