| Package | Affected versions | Patched versions |
|---|---|---|
| roller | = 5.1.0= 5.1.1 |
The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free