Skip to content

CVE record · 1 source

CVE-2026-105153

CVSS 7.7

Improper Restriction of XML External Entity Reference in Apache Roller 4.0 through 6.1.6 allows an authenticated user with no weblog permissions to…

Vendor: Apache Software Foundation
Product: Apache Roller
CVSS v3.1: 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-611
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 2h ago

Improper Restriction of XML External Entity Reference in Apache Roller 4.0 through 6.1.6 allows an authenticated user with no weblog permissions to…

Improper Restriction of XML External Entity Reference in Apache Roller 4.0 through 6.1.6 allows an authenticated user with no weblog permissions to read files readable by the Roller process and cause the server to issue outbound…

CVSS 7.7 CVE-2026-105153 Apache Software Foundation