PT-2019-9409 · Apache · Apache Roller

Arseniy Sharoglazov · Publicado 2019-05-28 · Atualizado 2019-06-11 · CVE-2018-17198

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Roller versions 5.2.1, 5.2.0 and earlier

Description The issue is related to Server-side Request Forgery (SSRF) and File Enumeration vulnerability. It relies on the Java SAX Parser, which supports external entities in XML DOCTYPE by default, making Apache Roller vulnerable to SSRF and File Enumeration attacks. This vulnerability exists even if the Roller XML-RPC interface is disabled via the Roller web admin UI.

Recommendations For Apache Roller versions 5.2.1, 5.2.0 and earlier, upgrade to the latest version, which is 5.2.2. Alternatively, edit the Roller web.xml file and comment out the XML-RPC Servlet mapping, specifically the XmlRpcServlet with the url-pattern /roller-services/xmlrpc.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2018-17198

Produtos afetados

Apache Roller

Referências · 4

• http://securityfocus.com/bid/108496 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-17198 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17198 · Aviso do Fabricante
• https://lists.apache.org/thread.html/94a36ed9c6241558b1c6181d8dd4ff263be7903abd1d20067d4330d5%40%3Cdev.roller.apache.org%3E · Nota