CVE-2026-80190— Apache Allura: Stored XSS via code repositories
Quick assessment
Affected
Apache Software Foundation Apache Allura
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Allura：通过 SVN 代码仓库存在存储型跨站脚本（XSS）漏洞。Git 仓库据信不受影响。该漏洞很可能已通过默认的 CSP（内容安全策略）请求头得到缓解。 此问题影响 Apache Allura 1.20.0 及更早版本。 建议用户升级到 1.21.0 版本以修复该问题。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by CompromiseAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache Allura | ≤ 1.20.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-80190
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Allura: Stored XSS via code repositories
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers.
This issue affects Apache Allura: through 1.20.0.
Users are recommended to upgrade to version 1.21.0, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Allura | 0 ~ 1.20.0 | - |
|
II. Public POCs for CVE-2026-80190
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-80190
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-80190 (1)
Same Patch Batch · Apache Software Foundation · 2026-09-04 · 7 CVEs total
| CVE-2026-80180 | Apache Allura: Stored XSS via markdown HTML processing | |
| CVE-2026-80181 | Apache Allura: Server-side request forgery | |
| CVE-2026-71216 | Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over clearte | |
| CVE-2026-81270 | Apache Allura: Information exposure via search | |
| CVE-2026-85229 | Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CV | |
| CVE-2026-52691 | Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Module |
IV. Related Vulnerabilities
Same product: Apache Allura
-
CVE-2026-81270
Apache Allura: Information exposure via search -
CVE-2026-80181
Apache Allura: Server-side request forgery -
CVE-2026-80180
Apache Allura: Stored XSS via markdown HTML processing -
CVE-2026-75099
Apache Allura: Unauthenticated REST disclosure -
CVE-2026-73237
Apache Allura: XSS in markdown pipeline
Same vendor: Apache Software Foundation
-
CVE-2026-78254
Apache Ant: Path traversal in ftp and scp tasks allows arbit -
CVE-2026-52691
Apache Griffin Hive Metastore Module: SQL Injection Vulnerab -
CVE-2026-85229
Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard -
CVE-2026-81270
Apache Allura: Information exposure via search -
CVE-2026-71216
Apache SkyWalking: PagerDuty alarm hook transmits the integr
Same weakness: CWE-79
-
CVE-2026-86278
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-86264
sfturing ssm_pro Order Endpoint OrderController.java cross s -
CVE-2026-86244
FastAdmin User Controller User.php login cross site scriptin -
CVE-2026-86238
projectworlds Online Examination System Feedback Form feedba -
CVE-2026-86226
Projectwolds Online Attendance System profile.php cross site
V. Comments for CVE-2026-80190
No comments yet