📦 Roller

Apache Roller versions up to 6.1.4 have a session management vulnerability where active user sessions remain valid after password changes. This allows attackers who have compromised credentials to mai...

This CVE describes a Regular Expression Denial of Service (ReDoS) vulnerability in Apache Roller where user-controlled inputs (Referer header, request URL, and query string) are used to build and exec...

This CSRF vulnerability in Apache Roller allows attackers to escalate privileges on multi-blog/user websites. By exploiting the CSRF protection deficiency, attackers can trick authenticated weblog own...