Apache Answer

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_answer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Answer (90e19b8c-d192-5add-b3a2-fc097a84ee74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34905 vulnerable 2026-07-29 00:43:24.858608 Apache Answer: Unlisted Questions Accessible via Direct API Access
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access restrictions on direct API endpoints, allowing authenticated users to discover and access unlisted questions, their answers, comments, and revision history. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Published: 2026-06-09T07:35:56.670Z
Updated: 2026-06-09T14:55:35.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34033 vulnerable 2026-07-29 00:43:23.520049 Apache Answer: HTML Content Injection in Email
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML into emails sent to other users. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Published: 2026-06-09T07:35:16.045Z
Updated: 2026-06-09T15:43:16.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34031 vulnerable 2026-07-29 00:43:23.518884 Apache Answer: The custom avatar was not properly validated
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to unintended external requests and tracking by third-party servers. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Published: 2026-06-09T07:34:38.977Z
Updated: 2026-06-09T15:12:18.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33582 vulnerable 2026-07-29 00:43:22.373256 Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Published: 2026-06-09T07:34:02.379Z
Updated: 2026-06-09T15:06:16.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25700 vulnerable 2026-07-29 00:34:57.248443 Apache Answer: AdminToken not invalidated after admin deactivation
Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivated, allowing continued access to administrative APIs until the token expired. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Published: 2026-06-10T14:57:00.853Z
Updated: 2026-06-19T05:45:50.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25699 vulnerable 2026-07-29 00:34:57.246066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25688 vulnerable 2026-07-29 00:34:57.196023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24735 vulnerable 2026-06-08 07:51:18.093303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29868 vulnerable 2026-06-08 07:14:56.879552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45719 vulnerable 2026-06-08 06:48:08.948088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41890 vulnerable 2026-06-08 06:43:55.419774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41888 vulnerable 2026-06-08 06:43:55.413812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40761 vulnerable 2026-06-08 06:43:53.138148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29217 vulnerable 2026-06-08 06:33:29.024515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26578 vulnerable 2026-06-08 06:31:26.500958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23349 vulnerable 2026-06-08 06:29:37.340157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22393 vulnerable 2026-06-08 06:29:34.815464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49619 vulnerable 2026-06-08 06:14:29.260864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.