Threats tagged 'ghsa-x95f-2r7c-5mv3'

Apache Roller versions 4.0 through 6.1.6 contain an XML External Entity (XXE) vulnerability in the AtomPub endpoint. An authenticated user without weblog permissions can exploit this flaw by submitting a crafted Atom entry, allowing them to read files accessible by the Roller process and cause the server to make outbound HTTP requests to attacker-controlled destinations. This occurs because the XML parser configuration permits external parameter entities and external DTD subsets, and parsing happens before authorization checks and feature enablement verification. Upgrading to Apache Roller 6.1.7 or later mitigates this issue by using a hardened XML parser configuration and rejecting AtomPub requests when the feature is disabled.