Session fixation

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4127 Race Condition within a Thread in answerdev/answer

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

CVE-2023-4127 Race Condition within a Thread in answerdev/answer

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4126

Affected software/component: answerdev/answer (GitHub repo). Vulnerability: Insufficient Session Expiration in the authentication/session handling mechanism. Root cause: session expiration is not sufficiently enforced, as described for versions prior to 1.1.0. Impact (per CVSS/related records): h...

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4125 Weak Password Requirements in answerdev/answer

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4124 Missing Authorization in answerdev/answer

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

CVE-2023-4125: Weak Password Requirements

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4124: Missing Authorization

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1...

answer Code Issue Vulnerability

answer is an open source knowledge-based community software. A code issue vulnerability exists in answerdev/answer versions prior to 1.1.0 that stems from a session expiration insufficiency issue that allows an attacker to reuse old session credentials or IDs for authorization...

PT-2023-27869 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.1.0 Description: The issue concerns weak password requirements in the GitHub repository answerdev/answer. Recommendations: For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue...

CVE-2023-4127: Race Condition within a Thread

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...

CVE-2023-4126: Insufficient Session Expiration

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-2590: Missing Authorization

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9...

CVE-2023-2590 Missing Authorization in answerdev/answer

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9...

PT-2023-20354 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.9 Description: The issue is related to missing authorization in the GitHub repository answerdev/answer. This can lead to a user rating their own answer as the best answer. Recommendations: For versions...

CVE-2023-2590

CVE-2023-2590 affects github.com/answerdev/answer. The vulnerability is described as Missing Authorization in answerdev/answer prior to version 1.0.9. Reported impacts in multiple sources indicate an ability for unauthorized actions such as a user rating their own answer as the best, reflecting a...

GHSA-65V8-6PVW-JWVQ Answer vulnerable to Insertion of Sensitive Information Into Sent Data

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 does not strip EXIF geolocation data from user-uploaded logos. As a result, anyone can get sensitive information like a user's device ID, geolocation, system information, system version, etc...