THREAT OPS › Threat News › CVE-2026-80190: Apache Allura: Stored XSS via code repositories
CVE-2026-80190: Apache Allura: Stored XSS via code repositories
<p>Posted by Dave Brondsema on Sep 03</p>Severity: low<br /> <br /> Affected versions:<br /> <br /> - Apache Allura through 1.20.0<br /> <br /> Description:<br /> <br /> Apache Allura: stored XSS via SVN code repositories. Git repositories are not <br /> known to be affected. The vulnerability is likely mitigated via default CSP <br /> headers.<br /> <br /> This issue affects Apache Allura: thro
MITRE ATT&CK techniques
- Code RepositoriesT1593.003
- Code RepositoriesT1213.003
- Code RepositoriesAML.T0095.000
Indicators of compromise
- CVE-2026-80190cve
- https://allura.apache.org/url
Original source: https://seclists.org/oss-sec/2026/q3/645