PT-2017-6442 · Apache · Apache Roller

Gregory Draperi · Published 2017-07-14 · Updated 2017-07-27 · CVE-2015-0249

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Roller versions 5.1 through 5.1.1

Description The issue allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (VTL) in the weblog page template.

Recommendations For Apache Roller versions 5.1 through 5.1.1, consider restricting access to the weblog page template to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of Velocity Text Language (VTL) in the weblog page template to prevent the execution of arbitrary Java code.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2015-0249

Affected Products

Apache Roller

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-0249 · Security Note
• https://mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3E · Note
• http://cve.killedkenny.io/cve/CVE-2015-0249 · Note
• http://openwall.com/lists/oss-security/2015/03/30/13 · Note