PT-2026-110912 · Apache · Apache Allura
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Apache Allura versions prior to 1.22.0
Description
Apache Allura contains a mass assignment issue within its REST API. Mass assignment occurs when an application takes user-provided input and binds it directly to an internal object or database model without proper filtering, potentially allowing an attacker to modify restricted fields.
Recommendations
Upgrade to version 1.22.0.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Allura