CVE-2012-2380

MEDIUM · CVSS 6.8 EPSS 1.59%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-06-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2012-2380

Severity

MEDIUM

CVSS

6.8

EPSS

1.59%

Apache

Original NVD Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.