Apache Roller Vulnerabilities

Apache Roller vulnerabilities.

14 October 2024

Privilege Escalation Vulnerability Affects Apache Roller Before 6.1.4
CVE-2024-46911
ApacheApache Roller

26 July 2024

XSS vulnerability in Apache Roller allows authenticated users to perform attacks
CVE-2024-25090
ApacheApache Roller5.4MEDIUM

6 August 2023

Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users.
CVE-2023-37581
ApacheApache Roller5.4MEDIUM

18 August 2021

regex injection leading to DoS
CVE-2021-33580
ApacheApache Roller7.5HIGH

15 July 2019

Reflected Cross-site Scripting Vulnerability in Apache Roller
CVE-2019-0234
ApacheApache Roller6.1MEDIUM

28 May 2019

Server-side Request Forgery and File Enumeration in Apache Roller
CVE-2018-17198
ApacheApache Roller9.8CRITICAL

10 October 2017

XML External Entity Vulnerability in Apache Roller by Apache
CVE-2014-0030
ApacheRollerEPSS 15%9.8CRITICAL

17 July 2017

Remote Code Execution Vulnerability in Apache Roller Weblog Template
CVE-2015-0249
ApacheRoller7.2HIGH

7 December 2013

26 June 2012

30 July 2009

CVE-2008-6879
ApacheRoller

No more vulnerabilities to load.