CVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identity
Apache Roller 6.1.5 OAuth lets attackers bind a known request token to any account, including an administrator.
1 stories, newest first · one card per story
Apache Roller 6.1.5 OAuth lets attackers bind a known request token to any account, including an administrator.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views