Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-23349
5.4
MEDIUMCVSS v3
Published
February 22, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. XSS attack when user enters summary. A logged-in user, when modifying their own submitted question, can input malicious code in the summary to create such an attack. Users are recommended to upgrade to version [1.2.5], which fixes the issue.
apache/answer
GitHubA Q&A platform software for teams at any scales. Whether it's a community forum, help center, or knowledge management platform, you can always count on Apache Answer.
GitHubA Q&A platform software for teams at any scales. Whether it's a community forum, help center, or knowledge management platform, you can always count on Apache Answer.<= 1.2.1NVD