Known vulnerabilities in Apache Roller

Vendor: Apache Foundation
Software: Apache Roller
Software CPE: cpe:2.3:a:apache_foundation:apache_roller:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Roller Apache Roller is affected by 4 known vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98497 - Cross-Site Request Forgery (CSRF)
CVE-2024-46911		 CWE-352 Medium
No
No
 6.1.4 14.10.2024 SB2024101461
#VU95139 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25090		 CWE-79 Low
No
No
 6.1.3 01.08.2024 SB2024080130
#VU55979 - Incorrect Regular Expression
CVE-2021-33580		 CWE-185 Medium
No
No
 6.0.2 19.08.2021 SB2021081904
#VU18663 - Server-Side Request Forgery (SSRF)
CVE-2018-17198		 CWE-918 Medium
No
No
 5.2.2 03.06.2019 SB2019060306