{"id":"CVE-2013-4212","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-4212","generatedAt":"2026-11-05T07:17:13.456Z","title":"Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL…","description":"Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka \"OGNL Injection.\"","published":"2013-12-07T20:55:02.000Z","lastModified":"2026-06-16T23:56:50.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-94"],"affected":["apache/roller"],"epss":{"score":0.81068,"percentile":0.99634,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2013-11-27","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":29859,"kind":"exploit","title":"Apache Roller - OGNL Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/29859","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/remote/29859.rb","file":"exploits/java/remote/29859.rb","published":"2013-11-27","added":"2013-11-27","updated":"2013-11-27","author":"Metasploit","type":"remote","platform":"java","port":8080,"verified":true,"codes":["CVE-2013-4212","OSVDB-100342"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 81.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://rollerweblogger.org/project/entry/apache_roller_5_0_2","tags":["Patch"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55862","tags":["Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55877","tags":["Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html","source":"secalert@redhat.com"},{"url":"http://www.exploit-db.com/exploits/29859","tags":["Exploit"],"source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/100342","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89239","source":"secalert@redhat.com"},{"url":"http://rollerweblogger.org/project/entry/apache_roller_5_0_2","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55862","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55877","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/29859","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/100342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89239","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-4212","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}