Apache Roller — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Apache Roller, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-24859	Apache Roller: Insufficient Session Expiration on Password Change CWE-613	8.8^AI	High^AI	2025-04-14
CVE-2024-46911	Apache Roller: Weakness in CSRF protection allows privilege escalation CWE-352	8.8^AI	High^AI	2024-10-14
CVE-2024-25090	Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode CWE-20	5.4	-	2024-07-26
CVE-2023-37581	Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users. CWE-79	5.4	-	2023-08-06
CVE-2021-33580	regex injection leading to DoS CWE-400	7.5	-	2021-08-18
CVE-2019-0234	Apache Roller 跨站脚本漏洞	6.1	-	2019-07-15
CVE-2018-17198	Apache Roller 代码问题漏洞	9.8	-	2019-05-28

All 7 known CVE vulnerabilities affecting Apache Roller with full Chinese analysis, references, and POCs where available.