Threats tagged 'ghsa-hhp3-h5fc-wr9j'

Apache Roller 6.1.6 contains a cross-site scripting (XSS) vulnerability that allows an authenticated user with Author role on a weblog using a custom theme to inject script code. This script runs in the browsers of anyone who accesses the affected file's resource URL. The issue arises because media files uploaded via a custom theme were served with a MIME type based on their path, which the uploader could control. Media uploads are disabled by default. The vulnerability is fixed in Apache Roller 6.1.7 and later, which serve these files under stricter rules and no longer accept the path from the upload form.