You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Dave Brondsema <br...@apache.org> on 2026/09/03 17:36:36 UTC

CVE-2026-81270: Apache Allura: Information exposure via search

Severity: moderate

Affected versions:

- Apache Allura through 1.20.0

Description:

Apache Allura: exposure of non-public information via search.

This issue affects Apache Allura: through 1.20.0.

Users are recommended to upgrade to version 1.21.0, which fixes the issue.

Credit:

n0mi1k (reporter)

References:

https://allura.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-81270