https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:37:21 +0000 https://cve.radiocsirt.org/vuln/cve-2024-46911 <p><strong>Affected:</strong> Apache Software Foundation Apache Roller</p> <p>Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller&#39;s CSRF protections allowed an escalation of privileges attack. This issue affects Apache Roller before 6.1.4.</p> <p>Roller users who run multi-blog/user Roller websites are recommended to upgrade to version 6.1.4, which fixes the issue.</p> <p>Roller 6.1.4 release announcement:  https://lists.apache.org/thread/3c3f6rwqptyw6wdc95654fq5vlosqdpw</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Roller</p> <p>Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller&#39;s CSRF protections allowed an escalation of privileges attack. This issue affects Apache Roller before 6.1.4.</p> <p>Roller users who run multi-blog/user Roller websites are recommended to upgrade to version 6.1.4, which fixes the issue.</p> <p>Roller 6.1.4 release announcement:  https://lists.apache.org/thread/3c3f6rwqptyw6wdc95654fq5vlosqdpw</p> https://cve.radiocsirt.org/vuln/cve-2024-46911