CVE-2026-79620
CVE-2026-79620 · Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
EPSS 0.2%
- Published
- Updated
Affected products and versions
apache answer
- Versions
- ≥ 0, ≤ 2.0.2: Affected (semver)
No fix published