Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-92120 EUVD-2026-97832GHSA-ccrf-jfj2-x65f

Apache Allura: Oauth1 Replay Attack

Published Oct 12, 2026 · Updated Oct 16, 2026 · Assigned by apache

Description

OAuth1 Request Replay Attack vulnerability in Apache Allura.

This issue affects Apache Allura: through 1.21.0.

Users are recommended to upgrade to version 1.22.0 which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Allura ≤ 1.21.0 —

References