Lucene search
+L

299 matches found

NVD
NVD
•added 2023/08/03 4:15 a.m.•25 views

CVE-2023-4124

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

8.1CVSS6.8AI score0.0065EPSS
SaveExploits1References2
Prion
Prion
•added 2023/08/03 4:15 a.m.•24 views

Session fixation

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

4.3CVSS8.7AI score0.00569EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/03 3:20 a.m.•21 views

CVE-2023-4127 Race Condition within a Thread in answerdev/answer

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

6.5CVSS6.7AI score0.00485EPSS
SaveExploits1References2
Mend
Mend
•added 2023/08/03 3:20 a.m.•4 views

CVE-2023-4127

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

7.1CVSS0.00485EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/08/03 3:20 a.m.•27 views

CVE-2023-4127 Race Condition within a Thread in answerdev/answer

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

6.5CVSS5.9AI score0.00485EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/08/03 3:08 a.m.•15 views

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

4.1CVSS6.7AI score0.00569EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/03 3:08 a.m.•39 views

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

4.1CVSS9AI score0.00569EPSS
SaveExploits1References2
CVE
CVE
•added 2023/08/03 3:08 a.m.•99 views

CVE-2023-4126

Affected software/component: answerdev/answer (GitHub repo). Vulnerability: Insufficient Session Expiration in the authentication/session handling mechanism. Root cause: session expiration is not sufficiently enforced, as described for versions prior to 1.1.0. Impact (per CVSS/related records): h...

8.8CVSS6.1AI score0.00569EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2023/08/03 3:08 a.m.•3 views

CVE-2023-4126

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

8.8CVSS0.00569EPSS
SaveExploits1References6
osv-cve
osv-cve
•added 2023/08/03 3:08 a.m.•35 views

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

4.1CVSS4.7AI score
SaveExploits0References4
osv-cve
osv-cve
•added 2023/08/03 3:06 a.m.•49 views

CVE-2023-4125 Weak Password Requirements in answerdev/answer

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

8.8CVSS8.8AI score
SaveExploits0References4
Mend
Mend
•added 2023/08/03 3:06 a.m.•5 views

CVE-2023-4125

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

8.8CVSS0.00883EPSS
SaveExploits1References6
Mend
Mend
•added 2023/08/03 3:05 a.m.•4 views

CVE-2023-4124

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

8.6CVSS0.0065EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/08/03 3:05 a.m.•32 views

CVE-2023-4124 Missing Authorization in answerdev/answer

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

8.1CVSS6.7AI score0.0065EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•3 views

CVE-2023-4126: Insufficient Session Expiration

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

8.8CVSS6.1AI score0.00569EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•4 views

CVE-2023-4127: Race Condition within a Thread

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

6.5CVSS6.6AI score0.00485EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/03 12:00 a.m.•16 views

answer Code Issue Vulnerability

answer is an open source knowledge-based community software. A code issue vulnerability exists in answerdev/answer versions prior to 1.1.0 that stems from a session expiration insufficiency issue that allows an attacker to reuse old session credentials or IDs for authorization...

8.8CVSS7AI score0.00569EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•2 views

CVE-2023-4124: Missing Authorization

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

8.1CVSS7.1AI score0.0065EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•3 views

CVE-2023-4125: Weak Password Requirements

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

8.8CVSS7.8AI score0.00883EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/08/03 12:00 a.m.•11 views

PT-2023-27869 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.1.0 Description: The issue concerns weak password requirements in the GitHub repository answerdev/answer. Recommendations: For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue...

8.8CVSS9.1AI score0.00883EPSS
SaveExploits1References8
Rows per page
Query Builder