CVE-2026-68482
CVE-2026-68482 · Apache Answer: Improper Authorization in Question Invite User Lookup
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
EPSS 0,2%
- Publicación
- Actualización
Productos y versiones afectados
apache answer
- Versiones
- ≥ 0, ≤ 2.0.2: Afectada (semver)
Sin corrección publicada