OAuth 1 rebinding vulnerability in Apache Allura.
OAuth 1 rebinding vulnerability in Apache Allura. This issue affects Apache Allura: through 1.22.0. Users are recommended to upgrade to version 1.22.1, which fixes the issue.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Apache Software Foundation
- Product
- Apache Allura
- Fix
- available
- Weakness
- CWE-863
- NVD status
- Received
Why it ranks 20 (Routine)
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.