CVE-2026-68482
CVE-2026-68482 · Apache Answer: Improper Authorization in Question Invite User Lookup
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
EPSS 0.2%
- Published
- Updated
Affected products and versions
apache answer
- Versions
- ≥ 0, ≤ 2.0.2: Affected (semver)
No fix published