Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-12-07 20:55
Updated : 2024-02-04 18:16
NVD link : CVE-2013-4212
Mitre link : CVE-2013-4212
CVE.ORG link : CVE-2013-4212
JSON object : View
Products Affected
apache
- roller
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')