What is CVE-2019-0234?

CVE-2019-0234 is a medium-severity vulnerability in Apache Roller, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2019-07-15.

How severe is CVE-2019-0234?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Apache Roller

CVE-2019-0234

A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation f…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Apache Roller — versions Roller 5.2, 5.2.1, 5.2.2. The unsupported pre-Roller 5.1 versions may also be affected.
Apache Roller — versions 5.2.0, 5.2.1, 5.2.2

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@apache.org (x_refsource_CONFIRM)
security@apache.org (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2019-0234?: CVE-2019-0234 is a medium-severity vulnerability in Apache Roller, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2019-07-15.
How severe is CVE-2019-0234?: Medium severity. CVSS v3 base score is 6.1 out of 10.