CVE-2024-46911

概要

参考情報

• lists.apache.org/thread/6m0ghjo9j92qty00t2qb6qf2spds0p5t · Vendor Advisory
• openwall.com/lists/oss-security/2024/10/12/1 · Mailing List

roller のその他の脆弱性

• CVE-2025-24859高 8.8A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated afte…
• CVE-2024-25090中 5.4Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name features in all ver…
• CVE-2023-37581中 5.4Insufficient input validation and sanitation in Weblog Category name, Website About and File Upload features in all versions of Apache Rolle…
• CVE-2021-33580高 7.5User controlled `request.getHeader("Referer")`, `request.getRequestURL()` and `request.getQueryString()` are used to build and run a regex e…
• CVE-2019-0234中 6.1A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize …