← All credits

hataehoon (GitHub: dpfkdlemtp)

6 vulnerability records and advisories credit this contributor.

CVE-2026-118412

Apache Roller: Disabled accounts can sign in through OpenID

CVE-2026-118411

Apache Roller: Cross-site request forgery through GET requests to administrative actions

CVE-2026-118410

Apache Roller: Unpublished entries remain readable through search after AtomPub unpublish

CVE-2026-118409

Apache Roller: Commenter email addresses recoverable through public search

CVE-2026-118408

Apache Roller: Unpublished entries of other weblogs readable through preview

CVE-2026-118405

Apache Roller: Exposure of other users' email addresses through the user search