EUVD-2026-70924
GHSA-49gm-q7rp-8x48
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Unauthenticated network search leaks private content (C:H); no data modification or service disruption is possible (I:N, A:N).
Primary rating from Vendor (CNA).
CVSS VectorVendor
Lifecycle Timeline
5Description PRE-NVD
Articles & Coverage 4
AnalysisAI
Unauthenticated information exposure in Apache Allura through version 1.20.0 allows remote attackers to retrieve non-public project content via the search functionality, bypassing access controls enforced elsewhere in the application. The search subsystem fails to apply visibility restrictions consistently, meaning private tickets, wiki pages, discussions, or code artifacts indexed by search may be readable without authentication. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to an Apache Allura instance running version 1.20.0 or earlier with the search feature active, which is a core default component requiring no special configuration to enable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 base score is driven by an unauthenticated network-accessible vector (AV:N/AC:L/PR:N/UI:N) with high confidentiality impact-the most alarming combination for an information disclosure flaw, since no foothold, authentication, or user interaction is required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Apache Allura 1.21.0, which is the vendor-confirmed fix version per the Apache advisory published at https://seclists.org/oss-sec/2026/q3/646 and the project site https://allura.apache.org/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running Apache Allura and inventory what confidential data (code, documentation, customer information) is stored in private projects. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today