Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-13572
HistoryMar 14, 2024 - 12:00 a.m.

Apache Answer Competitive Conditions Issue Vulnerability

2024-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
apache foundation
community platform
improper handling
concurrent access
shared resources
networked system
user accounts
security vulnerability
cnvd

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Apache Answer is a community platform of the Apache (USA) Foundation. Apache Answer 1.2.1 and prior versions suffer from a Competing Conditions vulnerability, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked system or product and can be exploited by an attacker to cause the simultaneous creation of multiple user accounts with the same name.

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%