PT-2026-110911 · Apache · Apache Allura
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Apache Allura versions prior to 1.22.0
Description
Apache Allura contains a flaw where OAuth1 callback validation is missing. This occurs when the system fails to properly verify the callback URL during the OAuth1 authentication process, which could allow an attacker to redirect users to a malicious site.
Recommendations
Upgrade to version 1.22.0.
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Allura