XSS vulnerability in code display in Apache Allura.
This issue affects Apache Allura: before 1.19.1.
Users are recommended to upgrade to version 1.19.1, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Allura: XSS in code display
AFFECTED PACKAGES:
Unknown / Unknown
41 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
12/08/2026 17:17
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes spe...
Nouvelle valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special charact...
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes spe...
Total des modifications: 2
Dernière mise à jour: 8 hours ago