CVE-2015-0249

概要

参考情報

• cve.killedkenny.io/cve/CVE-2015-0249 · Third Party Advisory
• openwall.com/lists/oss-security/2015/03/30/13 · Mailing List
• mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3E

roller のその他の脆弱性

• CVE-2025-24859高 8.8A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated afte…
• CVE-2024-46911中 4.7Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default webl…
• CVE-2024-25090中 5.4Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name features in all ver…
• CVE-2023-37581中 5.4Insufficient input validation and sanitation in Weblog Category name, Website About and File Upload features in all versions of Apache Rolle…
• CVE-2021-33580高 7.5User controlled `request.getHeader("Referer")`, `request.getRequestURL()` and `request.getQueryString()` are used to build and run a regex e…