CVE-2026-79620
CVE-2026-79620 · Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
EPSS 0,2%
- Publicación
- Actualización
Productos y versiones afectados
apache answer
- Versiones
- ≥ 0, ≤ 2.0.2: Afectada (semver)
Sin corrección publicada