Vulnerability Bulletins

CVE-2026-73239

   
Affected software APACHE
 
Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura.

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-73239