Threats tagged 'ghsa-6rpr-3cmq-j84c'

Apache Roller versions 4.0 through 6.1.6 contain a Cross-Site Request Forgery (CSRF) vulnerability in the Planet feed aggregator administration. This flaw allows an unauthenticated attacker to induce a logged-in global administrator to add a Planet subscription by visiting a crafted web page. The vulnerability arises because the action accepts GET requests without proper CSRF token validation, enabling the attacker to make the server fetch arbitrary URLs and publish fetched feed content without authentication. The Planet aggregator is enabled by default in affected versions. Upgrading to Apache Roller 6.1.7 or later mitigates this issue by requiring POST requests with valid CSRF tokens and disabling the Planet aggregator by default.