CVE-2026-24735 Apache Answer: Revision API Improper Access Control leads to Information Disclosure

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 1.7.1. An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized user to retrieve restricted or...

CVE-2026-24735

The Apache Answer project is vulnerable to the Exposure of Private Personal Information to an Unauthorized Actor (CWE-359). This issue exists in versions through 1.7.1 and specifically affects the github.com/apache/answer component. An unauthenticated API endpoint, specifically the /revisions end...

Linux Distros Unpatched Vulnerability : CVE-2022-25274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated with existing permissions, resulting in...