CVE-2026-73238

Apache Allura contains an XSS in code display vulnerability (CVE-2026-73238) affecting versions before 1.19.1. The issue is addressed by upgrading to Allura 1.19.1. The provided metrics indicate a CVSSv3.1 base score of 6.1 (Medium) with network attack vector, low confidentiality/integrity impact...

CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...