https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T16:42:58.052343+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2024-39155 cnvd-2024-39155 2026-09-29T16:42:58.139296+00:00 cnvd-2024-39155 https://vulnerability.circl.lu/vuln/fkie_cve-2024-38379 fkie_cve-2024-38379 2026-09-29T16:42:58.139371+00:00

Apache Allura's neighborhood settings are vulnerable to a stored XSS attack.  Only neighborhood admins can access these settings, so the scope of risk is limited to configurations where neighborhood admins are not fully trusted.

This issue affects Apache Allura: from 1.4.0 through 1.17.0.

Users are recommended to upgrade to version 1.17.1, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-7p4c-c4rq-7g98 GHSA-7p4c-c4rq-7g98 2026-09-29T16:42:58.139443+00:00

Apache Allura's neighborhood settings are vulnerable to a stored XSS attack.  Only neighborhood admins can access these settings, so the scope of risk is limited to configurations where neighborhood admins are not fully trusted.

This issue affects Apache Allura: from 1.4.0 through 1.17.0.

Users are recommended to upgrade to version 1.17.1, which fixes the issue.