CVE-2012-2381

LOW 3.5CVE-2012-2381 · Published 26/06/2012 · updated 16/06/2026

In short

CVE-2012-2381 is a LOW (CVSS 3.5) vulnerability affecting roller (apache).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
roller apache	`= 0.9.5= 0.9.6= 0.9.6.3= 0.9.6.4= 0.9.7= 0.9.7.1= 0.9.7.2= 0.9.8= 0.9.8.1= 0.9.8.2= 0.9.9= 1.0= 1.0.1= 1.1= 1.1.1= 1.1.2= 1.2= 1.3= 2.0= 2.0.1= 2.0.2= 2.1= 2.1.1= 2.3= 3.0= 3.1= 4.0= 4.0.1≤ 5.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role.

References

archives.neohapsis.com/archives/fulldisclosure/2012-06/0377.html

More vulnerabilities in roller

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

roller

apache

= 0.9.5= 0.9.6= 0.9.6.3= 0.9.6.4= 0.9.7= 0.9.7.1= 0.9.7.2= 0.9.8= 0.9.8.1= 0.9.8.2= 0.9.9= 1.0= 1.0.1= 1.1= 1.1.1= 1.1.2= 1.2= 1.3= 2.0= 2.0.1= 2.0.2= 2.1= 2.1.1= 2.3= 3.0= 3.1= 4.0= 4.0.1≤ 5.0

No fix yet

More vulnerabilities in roller

See all →