204 matches found
CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer
Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...
PT-2023-17058 · Unknown · Answerdev/Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Authentication Bypass by Capture-replay. This allows unauthorized access by reusing captured authentication data. There is no information provided about the estimat...
CVE-2023-1536: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
CVE-2023-1538 Observable Timing Discrepancy in answerdev/answer
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1540
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1543
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1542: Undefined Security Weakness
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1537 Authentication Bypass by Capture-replay in answerdev/answer
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1541
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1541
CVE-2023-1541 affects the open-source project answerdev/answer prior to version 1.0.6. The issue is a Business Logic Error arising from improper permission handling in the password-reset workflow (the /answer/admin/api/user/password path). An attacker with low privileges can modify the user_id pa...
CVE-2023-1537
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1542
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1539
Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1543: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1537: Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1540: Observable Response Discrepancy
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...