← Database

CVE-2026-69223

CRITICAL CVSS: 9.1 Published: 2026-08-11 Modified: 2026-08-17

Description

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

Affected Platforms

Apache Allura

Weakness Type

CWE-918

References