answerdev/answer vulnerabilities

Latest answerdev/answer CVEs

Newest publication first

1. CVE-2023-4815 Missing Authentication for Critical Function in answerdev/answer

   Published 2023-09-07

   High·CVSS 8.3

   Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.

2. CVE-2023-4127 Race Condition within a Thread in answerdev/answer

   Published 2023-08-03

   Medium·CVSS 6.5

   Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

3. CVE-2023-4126 Insufficient Session Expiration in answerdev/answer

   Published 2023-08-03

   Medium·CVSS 4.1

   Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

4. CVE-2023-4125 Weak Password Requirements in answerdev/answer

   Published 2023-08-03

   High·CVSS 8.8

   Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

5. CVE-2023-4124 Missing Authorization in answerdev/answer

   Published 2023-08-03

   High·CVSS 8.1

   Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

6. CVE-2023-2590 Missing Authorization in answerdev/answer

   Published 2023-05-09

   High·CVSS 7.7

   Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

7. CVE-2023-1535 Cross-site Scripting (XSS) - Stored in answerdev/answer

   Published 2023-03-21

   High·CVSS 8.3

   Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.