CVE-2026-80181

EUVD-2026-70922
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).




This issue affects Apache Allura: through 1.20.0.



Users are recommended to upgrade to version 1.21.0, which fixes the issue.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
UNKNOWN
---