THREATOPS
THREAT OPSThreat News › CVE-2026-81270: Apache Allura: Information exposure via search

CVE-2026-81270: Apache Allura: Information exposure via search

medoss_secPublished 2026-09-03

<p>Posted by Dave Brondsema on Sep 03</p>Severity: moderate<br /> <br /> Affected versions:<br /> <br /> - Apache Allura through 1.20.0<br /> <br /> Description:<br /> <br /> Apache Allura: exposure of non-public information via search.<br /> <br /> This issue affects Apache Allura: through 1.20.0.<br /> <br /> Users are recommended to upgrade to version 1.21.0, which fixes the issue.<br /> <br />

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/646