Logo
Retour à la veille

CVE-2026-92120

Publié : 12 octobre 2026
Modifié : 12 octobre 2026
Lien officiel NVD

Description détaillée

OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue.

Références et Patchs

https://lists.apache.org/thread.html/xpo1wbh1m18tvn9ow3h599wgcswbvn5xhttp://www.openwall.com/lists/oss-security/2026/10/12/5

Dernières Vulnérabilités

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

VOIR DÉTAILS

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

VOIR DÉTAILS

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

VOIR DÉTAILS