Apache Roller vulnerabilities

• apache roller Apache Roller: Insufficient Session Expiration on Password Change CVE-2025-24859 2.1 LowApril 14, 2025
• apache roller Apache Roller: Weakness in CSRF protection allows privilege escalation CVE-2024-46911 4.7 MediumOctober 14, 2024
• apache roller Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode CVE-2024-25090 5.4 MediumJuly 26, 2024
• apache roller Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller si… CVE-2023-37581 5.4 MediumAugust 6, 2023
• apache roller regex injection leading to DoS CVE-2021-33580 7.5 HighAugust 18, 2021
• apache roller A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math... CVE-2019-0234 6.1 MediumJuly 15, 2019
• apache roller Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2... CVE-2018-17198 9.8 CriticalMay 28, 2019
• apache roller The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML... CVE-2014-0030 Public exploit EPSS 16.9% 9.8 CriticalOctober 9, 2017
• apache roller The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users... CVE-2015-0249 7.2 HighJuly 14, 2017
• apache roller Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow... CVE-2013-4212 Public exploit EPSS 81.1% 6.8 MediumDecember 7, 2013
• apache roller Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote... CVE-2013-4171 4.3 MediumDecember 7, 2013
• apache roller Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote... CVE-2012-2381 3.5 LowJune 26, 2012
• apache roller Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache... CVE-2012-2380 6.8 MediumJune 26, 2012
• apache roller Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote... CVE-2008-6879 4.3 MediumJuly 30, 2009