Apache Roller 6.1.5 contains a CSRF vulnerability where the CSRF validation filters incorrectly accept requests without the required salt token, validating instead against a server-generated value. This flaw enables remote attackers to induce logged-in users to perform state-changing actions under their authority. The vulnerability does not require optional features or non-default configurations to be exploitable. The vendor fixed the issue in version 6.1.6 by validating only the submitted salt token and applying the check to multipart forms.

An attacker can cause a logged-in author or administrator to perform unauthorized state-changing actions by exploiting the CSRF vulnerability. This can lead to integrity and availability impacts on the affected system. Confidentiality is not impacted. The CVSS v3.1 score is 8.1 (High), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity and availability impact.

Users should upgrade to Apache Roller version 6.1.6 or later, where the vulnerability is fixed by proper validation of the submitted salt token and extension of the check to multipart forms. No other mitigation is required as the fix addresses the root cause.