Threats Tagged 'ghsa-ccrf-jfj2-x65f'

1 threat

Threats Tagged 'ghsa-ccrf-jfj2-x65f'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.3%	CVE-2026-92120Apache Allura · Authentication bypass by capture-replay Critical9.1EPSS 0.3%2026-10-12CVE Database V5CVE-2026-92120 CVE-2026-92120 is a critical authentication bypass vulnerability in Apache Allura affecting versions up to 1.21.0. It involves an OAuth1 request replay attack that allows unauthorized access. The issue is fixed in version 1.22.0, which users are strongly advised to upgrade to. EPSS 0.3%Vulnerability Apache Software Foundation #cwe-294 #ghsa-ccrf-jfj2-x65f	CVE Database V5	2026-10-12

Showing 1–1 of 1 result