PUBLISHED
2026-02-04 11:16
MODIFIED
2026-02-04 11:16
EPSS (Prob. Exploit)
0.69%
Top 47.8%
> DESCRIPTION
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.7.1.
An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized user to retrieve restricted or sensitive information.
Users are recommended to upgrade to version 2.0.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor - The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
> GITHUB SECURITY ADVISORY
GHSA-5w5r-8xc6-2xhw
MODERATE
Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability
AFFECTED PACKAGES:
GO / github.com/apache/answer
<= 1.7.1
Fixed in: 2.0.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Answer: Revision API Improper Access Control leads to Information Disclosure
AFFECTED PACKAGES:
Unknown / Unknown
21 versions affected
ALIASES:
GHSA-5w5r-8xc6-2xhw, GO-2026-4421
> HISTORIQUE DES MODIFICATIONS
Première apparition
04/02/2026 11:16
Source: NVD
📊
ENRICHISSEMENT
01/03/2026 06:46
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor - The product does not properly prevent a person's private, personal information from being accessed by actors who either (1)...
Total des modifications: 1
Dernière mise à jour: 8 months ago