All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-69223
CRITICALpublished 2026-08-11 17:19 UTC · 1 day ago · modified 2026-08-12 20:50 UTC
9.1
CVSS / 10
// description
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.
// weaknesses (CWE)
- CWE-918