CVE-2013-4212
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 81.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 81.07% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- apache/roller
- Source
- secalert@redhat.com
References
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2Patch
- http://secunia.com/advisories/55862Vendor Advisory
- http://secunia.com/advisories/55877Vendor Advisory
- http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
- http://www.exploit-db.com/exploits/29859Exploit
- http://www.osvdb.org/100342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89239
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2Patch
- http://secunia.com/advisories/55862Vendor Advisory
- http://secunia.com/advisories/55877Vendor Advisory
- http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
- http://www.exploit-db.com/exploits/29859Exploit
- http://www.osvdb.org/100342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89239
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.