CVE-2015-0249

The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code…

published July 14, 2017

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04587 · 91.5th percentile
Published
2017-07-14T20:00Z
EPSS history
Timeline
  • 14 JUL 20:00Z
    The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code…
    cvelistv5