anonhaven

CVE-2026-69223

NONE
Updated Aug 11, 2026
Apache
Parameter Value
Affected Versions before 1.19.1.
Fixed In 1.19.1
Type CWE-918 (Server-Side Request Forgery (SSRF))
Vendor Apache
Public PoC No

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

Weakness Type (CWE)

CWE-918 Server-Side Request Forgery (SSRF)

References 3

https://allura.apache.org/posts/2026-allura-1.19.1.html
security@apache.org
https://lists.apache.org/thread/9xpltfm6nombd7rdrx5o0hh8kxmm82pb
security@apache.org
http://www.openwall.com/lists/oss-security/2026/08/11/4
af854a3a-2127-422b-91ae-364da2661108
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-68871

Apache

None

CVE-2026-65948

Apache

7.3

CVE-2026-65945

Apache

6.5

CVE-2026-65942

Apache

7.5

CVE-2026-61899

Apache

7.5