All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-73239
NONEpublished 2026-08-12 17:17 UTC · 10 hours ago
CVSS / 10
// description
Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.
// weaknesses (CWE)
- CWE-280
- CWE-639