Apache Roller vulnerabilities

Latest Apache Roller CVEs

Newest publication first · page 2 of 2

1. CVE-2026-82378 Apache Roller: OAuth authorization endpoint trusts request-supplied identity

   Published 2026-09-28

   Critical·CVSS 9.0 EPSS 0.42%

   Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding request token for a configured site-wide consumer to bind that token to an arbitrary user account, including an administrato...

2. CVE-2026-82385 Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

   Published 2026-09-28

   Medium·CVSS 6.5 EPSS 0.28%

   Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to...

3. CVE-2026-82386 Apache Roller: XML external entity processing in OPML bookmark import

   Published 2026-09-28

   High·CVSS 7.7 EPSS 0.29%

   Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable e...

4. CVE-2026-82348 Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

   Published 2026-09-28

   High·CVSS 7.7 EPSS 0.31%

   Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installatio...

5. CVE-2026-82387 Apache Roller: Stored cross-site scripting via uploaded media content type

   Published 2026-09-28

   Medium·CVSS 5.4 EPSS 0.18%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the s...

6. CVE-2026-82546 Apache Roller: Stored cross-site scripting through incoming Trackback links

   Published 2026-09-28

   Medium·CVSS 6.1 EPSS 0.28%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbac...

7. CVE-2026-91204 Apache Roller: Stored javascript: URI in HTML comments

   Published 2026-09-28

   Medium·CVSS 6.1 EPSS 0.25%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a vi...

8. CVE-2026-91206 Apache Roller: Reflected XSS in the optional LDAP comment authenticator

   Published 2026-09-28

   Medium·CVSS 6.1 EPSS 0.25%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting through the optional LDAP comment authenticator, which writes request parameter values into its HTML form...

9. CVE-2025-24859 Apache Roller: Insufficient Session Expiration on Password Change

   Published 2025-04-14

   Low·CVSS 2.1 EPSS 1.2%

   A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active...

10. CVE-2024-46911 Apache Roller: Weakness in CSRF protection allows privilege escalation

    Published 2024-10-14

    Medium·CVSS 4.7 EPSS 0.45%

    Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller's CSRF protections allowed an escala...

11. CVE-2024-25090 Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode

    Published 2024-07-26

    Medium·CVSS 5.4 EPSS 0.75%

    Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name features in all versions of Apache Roller on all platforms allows an authenticated user to perform an XSS attack. Mitigation: if you do not have Roller configu...

12. CVE-2023-37581 Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller si...

    Published 2023-08-06

    Medium·CVSS 5.4 EPSS 1.2%

    Insufficient input validation and sanitation in Weblog Category name, Website About and File Upload features in all versions of Apache Roller on all platforms allows an authenticated user to perform an XSS attack. Mitigation: if you do not have Roller configured for untrusted use...

13. CVE-2021-33580 regex injection leading to DoS

    Published 2021-08-18

    High·CVSS 7.5 EPSS 3.3%

    User controlled request.getHeader("Referer"), request.getRequestURL() and request.getQueryString() are used to build and run a regex expression. The attacker doesn't have to use a browser and may send a specially crafted Referer header programmatically. Since the attacker control...

14. CVE-2019-0234 A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross...

    Published 2019-07-15

    Medium·CVSS 6.1 EPSS 3.4%

    A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to th...

15. CVE-2018-17198 Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser to implement its XML-RPC interface and by...

    Published 2019-05-28

    Critical·CVSS 9.8 EPSS 4.1%

    Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser to implement its XML-RPC interface and by default that parser supports external entities in XML DOCTYPE, which opens Roll...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.