CVE-2013-4212 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 81.1% (pctl 100)
Patch early
A public exploit exists.
Description
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 81.07% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-12-07 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| apache | roller |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apache Roller - OGNL Injection (Metasploit) | 2013-11-27 |
References
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2
- http://secunia.com/advisories/55862
- http://secunia.com/advisories/55877
- http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
- http://www.exploit-db.com/exploits/29859
- http://www.osvdb.org/100342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89239
- http://rollerweblogger.org/project/entry/apache_roller_5_0_2
- http://secunia.com/advisories/55862
- http://secunia.com/advisories/55877
- http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
- http://www.exploit-db.com/exploits/29859
- http://www.osvdb.org/100342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89239
→ the Explorer · watch your stack · NVD