CVE-2019-0234

A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller

published July 15, 2019

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller, which is now Roller 5.2.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03445 · 88.9th percentile
Published
2019-07-15T21:13Z
EPSS history
Timeline
  • 15 JUL 21:13Z
    A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller
    cvelistv5