CVE-2026-69223

Unknown

Published: 11/08/2026(UTC)Updated: 11/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Summary

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects versions before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

Risk Assessment

The risk includes potential use of the server to make unauthorized requests, leading to exposure of internal resources or attacks on other systems.

Recommendation

Upgrade Apache Allura to version 1.19.1 or later and review webhook configuration for SSRF mitigations.

Original NVD description (English source)

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.