Roller vulnerabilities

1 known vulnerability in Roller from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  A session management vulnerability exists in Apache Roller before version 6.1.5 where active…

  CVE-2025-24859Apr 14, 2025ApacheEPSS 1.16%

  A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing se