allura Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/allura/ Sun, 26 Feb 2023 06:45:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png allura Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/allura/ 32 32 CVE-2018-1319 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1319/ Sun, 26 Feb 2023 06:45:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1319/ In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim’s browsing session.

The post CVE-2018-1319 appeared first on CVE Vulnerability.

]]> In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim’s browsing session.

The post CVE-2018-1319 appeared first on CVE Vulnerability.

]]> CVE-2018-1299 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1299/ Sun, 26 Feb 2023 06:45:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1299/ In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the Allura web application. Some webservers used with Allura, such as Nginx, Apache/mod_wsgi or paster may prevent the attack from succeeding. Others, such as gunicorn do not prevent it and leave Allura vulnerable.

The post CVE-2018-1299 appeared first on CVE Vulnerability.

]]> In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the Allura web application. Some webservers used with Allura, such as Nginx, Apache/mod_wsgi or paster may prevent the attack from succeeding. Others, such as gunicorn do not prevent it and leave Allura vulnerable.

The post CVE-2018-1299 appeared first on CVE Vulnerability.

]]> CVE-2019-10085 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10085/ Sun, 26 Feb 2023 06:28:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10085/ In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page.

The post CVE-2019-10085 appeared first on CVE Vulnerability.

]]> In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page.

The post CVE-2019-10085 appeared first on CVE Vulnerability.

]]>