Dashboard / CVE-2026-122300

CVE-2026-122300

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-11 Modified: 2026-11-12 First seen: 2026-11-11 Status: pending_score

Description

Missing Authorization vulnerability in Apache Roller 4.0 through 6.1.6 allows a weblog member with the Limited role to remove or change entries that member may only read, including entries published by other members. The entry editor checked the member's weblog role but not whether that role permits work on the entry. Users are recommended to upgrade to Apache Roller 6.1.7 or later.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Apache Software Foundation Apache Roller 4.0

References & Advisories (2)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.19%
Raw Score 0.001950
Percentile 9.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00195
2026-11-12
0.00195

Intelligence Sources

mitre ref →
nvd ref →

External Links