CVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validation
Apache Roller 6.1.5 CSRF filters accept requests without the salt token, enabling forged state-changing actions.
1 stories, newest first · one card per story
Apache Roller 6.1.5 CSRF filters accept requests without the salt token, enabling forged state-changing actions.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views