Vulnerabilities > Apache > Allura > 1.11.1

DATE CVE VULNERABILITY TITLE RISK
2023-11-07 CVE-2023-46851 External Control of File Name or Path vulnerability in Apache Allura
Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments.
network
low complexity
apache CWE-73
4.9