HighCVSS 8.8
EPSS 0.82%
Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
Vendor
answerdev vulnerabilities
34 published CVES affecting answerdev, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 34
- Critical
- 6
- High
- 5
- Medium
- 21
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Products
Latest answerdev CVEs
Newest publication first · page 1 of 2
-
-
MediumCVSS 5.9 EPSS 0.49%
Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
-
HighCVSS 8.8 EPSS 0.57%
Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
-
HighCVSS 8.8 EPSS 0.88%
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
-
MediumCVSS 6.5 EPSS 0.65%
Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.
-
LowCVSS 3.5 EPSS 0.46%
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.
-
HighCVSS 8.8 EPSS 0.61%
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 6.5 EPSS 0.59%
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.
-
MediumCVSS 6.5 EPSS 0.60%
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
-
CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer
PublishedMediumCVSS 5.3 EPSS 0.61%Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.
-
LowCVSS 3.8 EPSS 0.64%
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.75%
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.54%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
-
MediumCVSS 5.3 EPSS 0.64%
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
-
HighCVSS 8.8 EPSS 0.78%
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.52%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
-
CriticalCVSS 9.8 EPSS 0.84%
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.3 EPSS 0.64%
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.52%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.52%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 4.8 EPSS 0.53%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.62%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.62%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.62%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.55%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.