CVE-2026-73239

MediumCVSS 6.5

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura before version 1.19.1.

Risk Assessment

An attacker could gain access to unauthorized resources or data, potentially leading to information confidentiality breaches.

Recommendation

It is recommended to upgrade Apache Allura to version 1.19.1, which fixes the issue.

Original NVD description (English source)

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.