CVE Catalog
CVE-2026-69223
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk0.73%
51th percentile - higher than 51% of all known CVEs
Summary
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects versions before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.
Risk Assessment
The risk includes potential use of the server to make unauthorized requests, leading to exposure of internal resources or attacks on other systems.
Recommendation
Upgrade Apache Allura to version 1.19.1 or later and review webhook configuration for SSRF mitigations.
Original NVD description (English source)
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.