{"id":"CVE-2026-69223","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-69223","summary":"Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1,…","details":"Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).\n\nThis issue affects Apache Allura: before 1.19.1.\n\nUsers are recommended to upgrade to version 1.19.1, which fixes the issue.","published":"2026-08-11T17:19:06.750","modified":"2026-08-12T20:50:58.370","cvss":{"score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://allura.apache.org/posts/2026-allura-1.19.1.html"},{"type":"WEB","url":"https://lists.apache.org/thread/9xpltfm6nombd7rdrx5o0hh8kxmm82pb"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/08/11/4"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T20:50:58.370"}}