https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:37:30 +0000 https://cve.radiocsirt.org/vuln/cve-2021-33580 <p><strong>Affected:</strong> Apache Software Foundation Apache Roller</p> <p>User controlled `request.getHeader(&#34;Referer&#34;)`, `request.getRequestURL()` and `request.getQueryString()` are used to build and run a regex expression. The attacker doesn&#39;t have to use a browser and may send a specially crafted Referer header programmatically. Since the attacker controls the string and the regex pattern he may cause a ReDoS by regex catastrophic backtracking on the server side. This problem has been fixed in Roller 6.0.2.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Roller</p> <p>User controlled `request.getHeader(&#34;Referer&#34;)`, `request.getRequestURL()` and `request.getQueryString()` are used to build and run a regex expression. The attacker doesn&#39;t have to use a browser and may send a specially crafted Referer header programmatically. Since the attacker controls the string and the regex pattern he may cause a ReDoS by regex catastrophic backtracking on the server side. This problem has been fixed in Roller 6.0.2.</p> https://cve.radiocsirt.org/vuln/cve-2021-33580