CVE-2013-4212

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Apache Roller - OGNL Injection (Metasploit)2013-11-27 · remote · java · Verified

Impact

Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://rollerweblogger.org/project/entry/apache_roller_5_0_2
• http://secunia.com/advisories/55862
• http://secunia.com/advisories/55877
• http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
• http://www.exploit-db.com/exploits/29859
• http://www.osvdb.org/100342
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89239
• http://rollerweblogger.org/project/entry/apache_roller_5_0_2
• http://secunia.com/advisories/55862
• http://secunia.com/advisories/55877
• http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html
• http://www.exploit-db.com/exploits/29859
• http://www.osvdb.org/100342
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89239