CVE-2025-29868

The Apache Answer Q&A platform (versions through 1.4.2 ) is vulnerable to a Private Data Structure Returned From A Public Method (CWE-495) issue. The root cause is that the application allows external content to be loaded without restriction, enabling an attacker to track or identify users by col...