Product
Apache Roller 5.0.1 through 6.1.6 contains a Cross-Site Request Forgery (CSRF) vulnerability allowing an unauthenticated attacker to create an administrator account if a logged-in administrator opens a link controlled by the attacker.