Lucene search

China National Vulnerability DatabaseCNVD-2024-13574

HistoryMar 14, 2024 - 12:00 a.m.

Apache Answer Cross-Site Scripting Vulnerability

2024-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache

cross-site scripting

security

web application

apache answer

usa foundation

vulnerability

attacker

payload

AI Score

6.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Apache Answer is a community platform of the Apache (USA) Foundation. Apache Answer 1.2.1 and earlier versions suffer from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a carefully crafted payload.