Skip to content

CVE record · 1 source

CVE-2026-118410

CVSS 3.7

Exposure of Resource to Wrong Sphere in Apache Roller 4.0 through 6.1.6 allows an unauthenticated visitor to read an entry after its author has…

Vendor: Apache Software Foundation
Product: Apache Roller
CVSS v3.1: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness: CWE-668
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 2h ago

Exposure of Resource to Wrong Sphere in Apache Roller 4.0 through 6.1.6 allows an unauthenticated visitor to read an entry after its author has…

Exposure of Resource to Wrong Sphere in Apache Roller 4.0 through 6.1.6 allows an unauthenticated visitor to read an entry after its author has withdrawn it to draft through the AtomPub API. The entry was removed from the weblog…

CVSS 3.7 CVE-2026-118410 Apache Software Foundation