Apache Roller has a security vulnerability (CVE-2025-24859) where sessions aren't invalidated after password changes, risking unauthorized access
Apache Roller
Important security update for Apache Roller! Find out how to safeguard your multi-user blogging platform from the risks of a CSRF flaw CVE-2024-46911