Product by Apache Software Foundation

Apache Allura

12 known vulnerabilities in Apache Allura (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apache Allura (Apache Software Foundation)

Critical	CVE-2026-73240	Apache Allura: Git command injection also in 1 other product	9.8	12.08.2026
Medium	CVE-2019-10085	Apache Allura: Cross-Site Scripting (XSS)	6.1	18.06.2019
High	CVE-2018-1299	Apache Allura: security vulnerability also in 1 other product	7.5	06.02.2018
Critical	CVE-2026-69223	Apache Allura: Server-side request forgery also in 1 other product	9.1	11.08.2026
Medium	CVE-2018-1319	Apache Allura: Cross-Site Scripting (XSS) also in 1 other product	6.1	15.03.2018
Medium	CVE-2026-73237	Apache Allura: XSS in markdown pipeline also in 1 other product	6.1	12.08.2026
Medium	CVE-2026-73238	Apache Allura: XSS in code display also in 1 other product	6.1	12.08.2026
Medium	CVE-2026-73239	Apache Allura: Missing permission checks IDOR also in 1 other product	6.5	12.08.2026
Medium	CVE-2023-46851	Apache Allura: sensitive information exposure via import also in 1 other product	4.9	07.11.2023
Medium	CVE-2026-75099	Apache Allura: Unauthenticated REST disclosure also in 1 other product	5.3	24.08.2026
High	CVE-2024-36471	Apache Allura: sensitive information exposure via DNS rebinding also in 1 other product	7.5	10.06.2024
Medium	CVE-2024-38379	Apache Allura: Stored authenticated XSS also in 1 other product	4.8	22.06.2024