Unscored CVE-2012-2381 EUVD-2012-2369GHSA-9x4r-29pc-p3hh

Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web …

Published Jun 26, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role.

References

20120624 CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability mailing-list