Lucene search

K
osvGoogleOSV:GHSA-RMQP-MVV2-54C6
HistoryFeb 22, 2024 - 12:30 p.m.

Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability

2024-02-2212:30:56
Google
osv.dev
4
apache answer
vulnerability
file upload
pixel flood attack
server memory
upgrade

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1.

Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in userΒ can cause such an attack by uploading an image when posting content.

Users are recommended to upgrade to version 1.2.5, which fixes the issue.

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%