| CVE-2026-90910 |
Missing authentication for critical function vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-86589 |
Incorrect implementation of authentication algorithm vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-79633 |
Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
|
Non notée
|
19 oct. 2026 |
| CVE-2026-79624 |
Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation
|
Non notée
|
19 oct. 2026 |
| CVE-2026-79620 |
Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
|
Non notée
|
19 oct. 2026 |
| CVE-2026-79613 |
Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles
|
Non notée
|
19 oct. 2026 |
| CVE-2026-76994 |
Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
|
Non notée
|
19 oct. 2026 |
| CVE-2026-71563 |
Missing Authorization vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-68482 |
Missing Authorization vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-67249 |
A vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-64945 |
Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions
|
Non notée
|
19 oct. 2026 |
| CVE-2026-64944 |
Apache Answer: Stored XSS via unsanitized HTML in imported question content
|
Non notée
|
19 oct. 2026 |
| CVE-2026-64943 |
Insertion of Sensitive Information into Log File vulnerability in Apache Answer
|
Non notée
|
19 oct. 2026 |
| CVE-2026-60053 |
Insufficient Session Expiration vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-60023 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-50749 |
Improper Authorization vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-48912 |
Improper Input Validation vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-48911 |
Insufficient Verification of Data Authenticity vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-48834 |
Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer
|
Non notée
|
5 août 2026 |
| CVE-2026-25700 |
Improper Restriction of Security Token Assignment vulnerability in Apache Answer
|
Non notée
|
10 juin 2026 |
| CVE-2026-34905 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer
|
Non notée
|
9 juin 2026 |
| CVE-2026-34033 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer
|
Non notée
|
9 juin 2026 |
| CVE-2026-34031 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer
|
Non notée
|
9 juin 2026 |
| CVE-2026-33582 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer
|
Non notée
|
9 juin 2026 |
| CVE-2026-25699 |
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer
|
Non notée
|
9 juin 2026 |