Apache Roller would like to thank Ed Ra (https://github.com/edvraa) for reporting this.

1 vulnerability record and advisories credit this contributor.