Successful XSS attack against Apache Infrastructure

Apache was hit by a an attack that combined XSS and brute force. The hacker attack was impressive, they were able to take control of server machines and to get passwords and logins of admin users.
Full report of the attack was published by Apache team here.