Releases65
Frequency2 weeks 6 days
Last Release
Stars15.5K
A Q&A platform software for teams at any scales. Whether it's a community forum, help center, or knowledge management platform, you can always count on Apache Answer.

CVE History

CVEPublishedCVSS v3CVSS v2
8.8 HIGH

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.

5.9 MEDIUM

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

8.8 HIGH

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

8.8 HIGH

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

6.5 MEDIUM

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

3.5 LOW

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

8.8 HIGH

Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.

6.5 MEDIUM

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.

6.5 MEDIUM

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

8.8 HIGH

Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

3.8 LOW

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

5.3 MEDIUM

Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

5.3 MEDIUM

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.

5.3 MEDIUM

Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

9.8 CRITICAL

Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

4.8 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

4.8 MEDIUM

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4 MEDIUM

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

9.8 CRITICAL

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

9 CRITICAL

Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.

9 CRITICAL

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

9 CRITICAL

Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.

9 CRITICAL

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

6.8 MEDIUM

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.