All 12 CVE vulnerabilities found in Apache Allura, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apache Software Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-75099 | Apache Allura: Unauthenticated REST disclosure CWE-200 | - | - | 2026-08-24 |
| CVE-2026-73237 | Apache Allura: XSS in markdown pipeline CWE-80 | - | - | 2026-08-12 |
| CVE-2026-73238 | Apache Allura: XSS in code display CWE-80 | - | - | 2026-08-12 |
| CVE-2026-73239 | Apache Allura: Missing permission checks IDOR CWE-280 | - | - | 2026-08-12 |
| CVE-2026-73240 | Apache Allura: Git command injection CWE-88 | - | - | 2026-08-12 |
| CVE-2026-69223 | Apache Allura: Server-side request forgery CWE-918 | - | - | 2026-08-11 |
| CVE-2024-38379 | Apache Allura: Stored authenticated XSS CWE-79 | 4.8 | - | 2024-06-22 |
| CVE-2024-36471 | Apache Allura: sensitive information exposure via DNS rebinding CWE-20 | 4.9 | - | 2024-06-10 |
| CVE-2023-46851 | Apache Allura: sensitive information exposure via import CWE-20 | 9.8 | - | 2023-11-07 |
| CVE-2019-10085 | Apache Allura 跨站脚本漏洞 | 6.1 | - | 2019-06-18 |
| CVE-2018-1319 | Apache Allura 注入漏洞 | 6.1 | - | 2018-03-15 |
| CVE-2018-1299 | Apache Allura 安全漏洞 | 7.5 | - | 2018-02-06 |
All 12 known CVE vulnerabilities affecting Apache Allura with full Chinese analysis, references, and POCs where available.