170 matches found
CVE-2023-1976: Password Aging with Long Expiration
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1974 Exposure of Sensitive Information Through Metadata in answerdev/answer
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8...
Answer vulnerable to Stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
CVE-2023-1543
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1542
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1540
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1535
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
Session fixation
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1536
CVE-2023-1536 describes a stored Cross-site Scripting (XSS) vulnerability in the GitHub repository answerdev/answer for versions prior to 1.0.7 . The issue arises from user-supplied input being stored and subsequently reflected, enabling an attacker to execute script in an authenticated user’s co...
CVE-2023-1543: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1542: Undefined Security Weakness
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1541
CVE-2023-1541 affects the open-source project answerdev/answer prior to version 1.0.6. The issue is a Business Logic Error arising from improper permission handling in the password-reset workflow (the /answer/admin/api/user/password path). An attacker with low privileges can modify the user_id pa...
CVE-2023-1540
CVE-2023-1540 concerns the open‑source knowledgebase app answerdev/answer prior to version 1.0.6. The vulnerability is described as an observable response discrepancy in the GitHub repository’s Answer before 1.0.6, enabling information disclosure during the password reset flow: an attacker could ...
CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1536: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
CVE-2023-1535 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
CVE-2023-1541: Undefined Security Weakness
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1538: Observable Timing Discrepancy
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...