PT-2026-99789

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Improper restriction of XML External Entity XXE references allows a user with entry-editing rights on a weblog to force the server to parse a trackback response using an XML parser that does not disable...