High severity7.2NVD Advisory· Published Jul 17, 2017· Updated May 13, 2026
CVE-2015-0249
CVE-2015-0249
Description
The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- cve.killedkenny.io/cve/CVE-2015-0249nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2015/03/30/13nvdMailing ListMitigationThird Party Advisory
- mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3Envd
News mentions
0No linked articles in our index yet.