CVE-2026-73237

MediumCVSS 6.1

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

XSS vulnerability in Markdown handling in Apache Allura from version 1.10.0 before 1.19.1.

Risk Assessment

An attacker could inject malicious script via Markdown content, potentially leading to session theft or other attacks on users.

Recommendation

It is recommended to upgrade Apache Allura to version 1.19.1, which fixes the issue.

Original NVD description (English source)

XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.