CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-92119: Apache Allura: REST API Mass Assignment

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10053

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-92119: Apache Allura: REST API Mass Assignment

A mass assignment vulnerability in Apache Allura's REST application programming interface (API) affects versions through 1.21.0. The moderate severity issue allows unintended modification of application state through API requests. Apache recommends upgrading to version 1.22.0 to address the flaw.

Why it matters: Organizations running Apache Allura through 1.21.0 should upgrade immediately, as the vulnerability allows attackers to modify data fields through the REST API that should be protected from user input.

CVEsCVE-2026-92119
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary