PT-2026-110912
CVE-2026-92119
·
تاريخ النشر
2026-10-12
·
تاريخ التحديث
2026-10-16
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Apache Allura versions prior to 1.22.0
Description
Apache Allura contains a mass assignment issue within its REST API. Mass assignment occurs when an application takes user-provided input and binds it directly to an internal object or database model without proper filtering, potentially allowing an attacker to modify restricted fields.
Recommendations
Upgrade to version 1.22.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾