Known vulnerabilities in Apache Allura 1.20.0
Vendor:
Apache Foundation
Software:
Apache Allura
Version:
1.20.0
Software CPE:
cpe:2.3:a:apache_foundation:allura:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Vulnerabilities by Severity
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146871 - Improper Access Control CVE-2026-81270 |
CWE-284 | Medium | 1.21.0 | 03.09.2026 |
SB2026090361 |
||
| #VU146870 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-80190 |
CWE-79 | Low | 1.21.0 | 03.09.2026 |
SB2026090361 |
||
| #VU146869 - Server-Side Request Forgery (SSRF) CVE-2026-80181 |
CWE-918 | Low | 1.21.0 | 03.09.2026 |
SB2026090361 |
||
| #VU146868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-80180 |
CWE-79 | Medium | 1.21.0 | 03.09.2026 |
SB2026090361 |