CVE-2018-1319: Apache Allura

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim's browsing session.

Affected products

• Apache Allura: up to and including 1.8.0

Published 2018-03-15. Last modified 2026-06-17.