Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Roller 跨站请求伪造漏洞
Vulnerability Description
Apache Roller是美国阿帕奇（Apache）软件基金会的一套功能丰富的多用户博客平台。 Apache Roller 5.0.1之前版本中的admin/editor控制台中存在多个跨站请求伪造(CSRF)漏洞。远程攻击者可通过利用HTTP POST函数劫持管理员或编辑者的授权。
CVSS Information
N/A
Vulnerability Type
N/A