CVE-2026-73238

MediumCVSS 6.1

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

XSS vulnerability in code display in Apache Allura before version 1.19.1.

Risk Assessment

An attacker could inject malicious script that executes in the user's browser, potentially leading to session theft or other attacks.

Recommendation

It is recommended to upgrade Apache Allura to version 1.19.1, which fixes the issue.

Original NVD description (English source)

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.