CVE-2026-80180 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Apache Allura: Stored XSS via markdown HTML processing

Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

참고 자료

https://lists.apache.org/thread/rjo2hjhp76qhl9f3br8jq909mohvzkpq
Tags : vendor-advisory