agentprime: apache-software-foundation-apache-rollerEvery new CVE for apache-software-foundation-apache-roller.https://agentprime.io/CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URLhttps://agentprime.io/advisories/CVE-2026-86507/https://agentprime.io/advisories/CVE-2026-86507/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 08:27:20 GMTCVECVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayedhttps://agentprime.io/advisories/CVE-2026-82379/https://agentprime.io/advisories/CVE-2026-82379/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:53:00 GMTCVECVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validationhttps://agentprime.io/advisories/CVE-2026-82380/https://agentprime.io/advisories/CVE-2026-82380/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:52:27 GMTCVECVE-2026-82381: Apache Roller: Stored cross-site scripting in the authoring UIhttps://agentprime.io/advisories/CVE-2026-82381/https://agentprime.io/advisories/CVE-2026-82381/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:51:54 GMTCVECVE-2026-82382: Apache Roller: Reflected cross-site scripting in the frontpage directory parameterhttps://agentprime.io/advisories/CVE-2026-82382/https://agentprime.io/advisories/CVE-2026-82382/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:51:31 GMTCVECVE-2026-82383: Apache Roller: Anonymous setup action allows frontpage configuration tamperinghttps://agentprime.io/advisories/CVE-2026-82383/https://agentprime.io/advisories/CVE-2026-82383/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:48:34 GMTCVECVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpointhttps://agentprime.io/advisories/CVE-2026-82384/https://agentprime.io/advisories/CVE-2026-82384/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:47:43 GMTCVEcriticalCVE-2026-82375: Apache Roller: Server-side request forgery via entry trackback and enclosure URLshttps://agentprime.io/advisories/CVE-2026-82375/https://agentprime.io/advisories/CVE-2026-82375/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:46:48 GMTCVECVE-2026-82376: Apache Roller: XML external entity processing in trackback response parserhttps://agentprime.io/advisories/CVE-2026-82376/https://agentprime.io/advisories/CVE-2026-82376/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:46:10 GMTCVECVE-2026-82377: Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlershttps://agentprime.io/advisories/CVE-2026-82377/https://agentprime.io/advisories/CVE-2026-82377/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:45:40 GMTCVEcriticalCVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identityhttps://agentprime.io/advisories/CVE-2026-82378/https://agentprime.io/advisories/CVE-2026-82378/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:45:10 GMTCVEcriticalCVE-2026-82385: Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath fileshttps://agentprime.io/advisories/CVE-2026-82385/https://agentprime.io/advisories/CVE-2026-82385/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:44:07 GMTCVECVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark importhttps://agentprime.io/advisories/CVE-2026-82386/https://agentprime.io/advisories/CVE-2026-82386/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:43:31 GMTCVECVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookupshttps://agentprime.io/advisories/CVE-2026-82348/https://agentprime.io/advisories/CVE-2026-82348/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:36:45 GMTCVECVE-2026-82387: Apache Roller: Stored cross-site scripting via uploaded media content typehttps://agentprime.io/advisories/CVE-2026-82387/https://agentprime.io/advisories/CVE-2026-82387/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:36:12 GMTCVECVE-2026-82546: Apache Roller: Stored cross-site scripting through incoming Trackback linkshttps://agentprime.io/advisories/CVE-2026-82546/https://agentprime.io/advisories/CVE-2026-82546/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:35:38 GMTCVECVE-2026-91204: Apache Roller: Stored javascript: URI in HTML commentshttps://agentprime.io/advisories/CVE-2026-91204/https://agentprime.io/advisories/CVE-2026-91204/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:34:33 GMTCVECVE-2026-91206: Apache Roller: Reflected XSS in the optional LDAP comment authenticatorhttps://agentprime.io/advisories/CVE-2026-91206/https://agentprime.io/advisories/CVE-2026-91206/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:33:13 GMTCVECVE-2025-24859: Apache Roller: Insufficient Session Expiration on Password Changehttps://agentprime.io/advisories/CVE-2025-24859/https://agentprime.io/advisories/CVE-2025-24859/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 08:18:54 GMTCVECVE-2024-46911: Apache Roller: Weakness in CSRF protection allows privilege escalationhttps://agentprime.io/advisories/CVE-2024-46911/https://agentprime.io/advisories/CVE-2024-46911/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 08:13:05 GMTCVECVE-2024-25090: Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users modehttps://agentprime.io/advisories/CVE-2024-25090/https://agentprime.io/advisories/CVE-2024-25090/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jul 2024 08:36:47 GMTCVECVE-2023-37581: Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller s…https://agentprime.io/advisories/CVE-2023-37581/https://agentprime.io/advisories/CVE-2023-37581/Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Aug 2023 07:21:04 GMTCVECVE-2021-33580: regex injection leading to DoShttps://agentprime.io/advisories/CVE-2021-33580/https://agentprime.io/advisories/CVE-2021-33580/Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Aug 2021 07:50:10 GMTCVECVE-2018-17198: Apache Software Foundation Apache Roller: Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller…https://agentprime.io/advisories/CVE-2018-17198/https://agentprime.io/advisories/CVE-2018-17198/Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 May 2019 17:08:11 GMTCVE