265 matches found
Answer vulnerable to Exposure of Sensitive Information Through Metadata
answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 may expose sensitive information, such as EXIF data and GPS coordatinates, via image metadata...
Information disclosure
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1975: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1975 Insertion of Sensitive Information Into Sent Data in answerdev/answer
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1975 Insertion of Sensitive Information Into Sent Data in answerdev/answer
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1976 Password Aging with Long Expiration in answerdev/answer
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6...
PT-2023-17382 · Unknown · Answerdev/Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.8 Description: The issue concerns the exposure of sensitive information through metadata in the answerdev/answer GitHub repository. This exposure can include sensitive data such as EXIF data and GPS...
CVE-2023-1976: Password Aging with Long Expiration
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1974 Exposure of Sensitive Information Through Metadata in answerdev/answer
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1976 Password Aging with Long Expiration in answerdev/answer
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1974 Exposure of Sensitive Information Through Metadata in answerdev/answer
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1975
The CVE-2023-1975 entry refers to an information-disclosure flaw in the open-source project answerdev/answer prior to version 1.0.8, where EXIF geolocation data is not stripped from user-uploaded logos. Multiple connected sources (CNVD/CNNVD, GHSA, OSV, NVD, CVE listings) corroborate that an atta...
CVE-2023-1976
CVE-2023-1976 affects answerdev/answer (open-source knowledge-based community software). The root cause is password reset links not expiring, enabling potential account takeover for versions prior to 1.0.6. Exploitation details are not provided in the documents; impact is described as account tak...
CVE-2023-1974 Exposure of Sensitive Information Through Metadata in answerdev/answer
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8...
CVE-2023-1974: Exposure of Sensitive Information Through Metadata
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8...
Answerdev 1.0.3 Account Takeover
Exploit Title: Answerdev 1.0.3 - Account Takeover Date: Reported on Jan 24th 2023 Exploit Author: Eduardo Pérez-Malumbres Cervera @blueudp Vendor Homepage: https://answer.dev/ Software Link: https://github.com/answerdev/answer Version: 1.0.3 Tested on: Ubuntu 22.04 / Debian 11 CVE : CVE-2023-0744...
Answerdev 1.0.3 - Account Takeover Exploit
Exploit Title: Answerdev 1.0.3 - Account Takeover Exploit Author: Eduardo Pérez-Malumbres Cervera @blueudp Vendor Homepage: https://answer.dev/ Software Link: https://github.com/answerdev/answer Version: 1.0.3 Tested on: Ubuntu 22.04 / Debian 11 CVE : CVE-2023-0744 from sys import argv import...
Answerdev 1.0.3 - Account Takeover
Exploit Title: Answerdev 1.0.3 - Account Takeover Date: Reported on Jan 24th 2023 Exploit Author: Eduardo Pérez-Malumbres Cervera @blueudp Vendor Homepage: https://answer.dev/ Software Link: https://github.com/answerdev/answer Version: 1.0.3 Tested on: Ubuntu 22.04 / Debian 11 CVE : CVE-2023-0744...
