agentprime: apache-software-foundation-apache-alluraEvery new CVE for apache-software-foundation-apache-allura.https://agentprime.io/CVE-2026-92120: Apache Allura: Oauth1 Replay Attackhttps://agentprime.io/advisories/CVE-2026-92120/https://agentprime.io/advisories/CVE-2026-92120/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 20:08:15 GMTCVEcriticalCVE-2026-92119: Apache Allura: REST API Mass Assignmenthttps://agentprime.io/advisories/CVE-2026-92119/https://agentprime.io/advisories/CVE-2026-92119/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 20:06:52 GMTCVEcriticalCVE-2026-92116: Apache Allura: OAuth1 missing callback validationhttps://agentprime.io/advisories/CVE-2026-92116/https://agentprime.io/advisories/CVE-2026-92116/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 20:04:28 GMTCVEcriticalCVE-2026-80190: Apache Allura: Stored XSS via code repositorieshttps://agentprime.io/advisories/CVE-2026-80190/https://agentprime.io/advisories/CVE-2026-80190/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 07:06:19 GMTCVECVE-2026-81270: Apache Allura: Information exposure via searchhttps://agentprime.io/advisories/CVE-2026-81270/https://agentprime.io/advisories/CVE-2026-81270/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 06:59:49 GMTCVECVE-2026-80181: Apache Allura: Server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-80181/https://agentprime.io/advisories/CVE-2026-80181/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 06:52:42 GMTCVEcriticalCVE-2026-80180: Apache Allura: Stored XSS via markdown HTML processinghttps://agentprime.io/advisories/CVE-2026-80180/https://agentprime.io/advisories/CVE-2026-80180/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 06:50:14 GMTCVECVE-2026-75099: Apache Allura: Unauthenticated REST disclosurehttps://agentprime.io/advisories/CVE-2026-75099/https://agentprime.io/advisories/CVE-2026-75099/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 16:42:20 GMTCVECVE-2026-73237: Apache Allura: XSS in markdown pipelinehttps://agentprime.io/advisories/CVE-2026-73237/https://agentprime.io/advisories/CVE-2026-73237/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 16:42:27 GMTCVECVE-2026-73238: Apache Allura: XSS in code displayhttps://agentprime.io/advisories/CVE-2026-73238/https://agentprime.io/advisories/CVE-2026-73238/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 16:41:58 GMTCVECVE-2026-73239: Apache Allura: Missing permission checks IDORhttps://agentprime.io/advisories/CVE-2026-73239/https://agentprime.io/advisories/CVE-2026-73239/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 16:41:41 GMTCVECVE-2026-73240: Apache Allura: Git command injectionhttps://agentprime.io/advisories/CVE-2026-73240/https://agentprime.io/advisories/CVE-2026-73240/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 16:41:19 GMTCVEcriticalCVE-2026-69223: Apache Allura: Server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-69223/https://agentprime.io/advisories/CVE-2026-69223/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:03:04 GMTCVEcriticalCVE-2024-38379: Apache Allura: Stored authenticated XSShttps://agentprime.io/advisories/CVE-2024-38379/https://agentprime.io/advisories/CVE-2024-38379/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Jun 2024 09:09:32 GMTCVECVE-2024-36471: Apache Allura: sensitive information exposure via DNS rebindinghttps://agentprime.io/advisories/CVE-2024-36471/https://agentprime.io/advisories/CVE-2024-36471/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 21:55:06 GMTCVECVE-2023-46851: Apache Allura: sensitive information exposure via importhttps://agentprime.io/advisories/CVE-2023-46851/https://agentprime.io/advisories/CVE-2023-46851/Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Nov 2023 08:56:35 GMTCVECVE-2018-1319: In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting.https://agentprime.io/advisories/CVE-2018-1319/https://agentprime.io/advisories/CVE-2018-1319/Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Mar 2018 20:00:00 GMTCVECVE-2018-1299: Apache Software Foundation Apache Allura: In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files…https://agentprime.io/advisories/CVE-2018-1299/https://agentprime.io/advisories/CVE-2018-1299/Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Feb 2018 19:00:00 GMTCVE