PUBLISHED
2026-06-09 09:16
MODIFIED
2026-06-09 09:16
EPSS (Prob. Exploit)
0.57%
Top 53.3%
> DESCRIPTION
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.0.
Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and its revision history.
Users are recommended to upgrade to version 2.0.1, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor - The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
> GITHUB SECURITY ADVISORY
GHSA-w754-5646-xq9j
MODERATE
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
AFFECTED PACKAGES:
GO / github.com/apache/incubator-answer
< 1.7.2-0.20260206073245-92994b49976b
Fixed in: 1.7.2-0.20260206073245-92994b49976b
> HISTORIQUE DES MODIFICATIONS
Première apparition
09/06/2026 09:16
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor - The product does not properly prevent a person's private, personal information from being accessed by actors who either (1)...
Total des modifications: 1
Dernière mise à jour: 4 months ago