CVE-2024-36471CWE-20CWE-200CWE-918

Apache Allura: sensitive information exposure via DNS rebinding

High · published June 10, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL.  Project administrators can run these imports, which could cause Allura to read from internal services and expose them.

This issue affects Apache Allura from 1.0.1 through 1.16.0.

Users are recommended to upgrade to version 1.17.0, which fixes the issue. If you are unable to upgrade, set "disable_entry_points.allura.importers = forge-tracker, forge-discussion" in your .ini config file.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00750 · 54.4th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-06-10T21:55Z
EPSS history
Timeline
  • 10 JUN 21:55Z
    Apache Allura: sensitive information exposure via DNS rebinding
    cvelistv5