Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

CVE-2026-92119: Apache Allura: REST API Mass Assignment

oss-security ()2 · 2 reads
Read at seclists.org
Part of a story covered by 2 sourcesThree Apache Allura flaws disclosed on oss-securityMerged summary & timeline
AI summary · grok-4.7Summaries by Vani AI

Apache Allura has a moderate-severity REST API mass-assignment flaw, CVE-2026-92119.

Dave Brondsema announced CVE-2026-92119, a REST API mass-assignment vulnerability in Apache Allura, rated moderate. The oss-security post links to the project and the CVE record but does not list affected versions, a fix, or exploitation.

Key facts
  • CVE-2026-92119 covers REST API mass assignment in Apache Allura.
  • The project rates the vulnerability moderate.
  • No patch level or active exploitation is reported.
Analyze CVE-2026-92119 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-92119
Tags
apachealluramass-assignmentrest-apicve-2026-92119
Vendors
Apache
Products
Apache Allura
Organizations
Apache Software Foundation

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-92119
REST API Mass Assignment in Apache Allura
9.1—

From the original article

Posted by Dave Brondsema on Oct 12 Severity: moderate https://allura. apache. org/ https://www.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.