Read the docs

answerdev

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

answerdev records in CISA KEV

No answerdev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Answer 34 records HIGH

Records

34 records

TI-2023-00706 CVE-2023-0744 · GHSA-4cwh-8w4g-jxxh

Improper Access Control in answerdev/answer

Priority HIGH 82

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06368 Published 2023-02-08 Fixed in 1.0.4 CWE-284
TI-2023-00705 CVE-2023-0743 · GHSA-hjmr-xm25-36mh

Cross-site Scripting (XSS) - Generic in answerdev/answer

Priority HIGH 74

Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00745 Published 2023-02-08 Fixed in 1.0.4 CWE-79
TI-2023-00704 CVE-2023-0742 · GHSA-rmw8-7823-wp7f

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority HIGH 74

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00871 Published 2023-02-08 Fixed in 1.0.4 CWE-79
TI-2023-00703 CVE-2023-0741 · GHSA-p7wj-c85f-xq9h

Cross-site Scripting (XSS) - DOM in answerdev/answer

Priority HIGH 74

Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00871 Published 2023-02-08 Fixed in 1.0.4 CWE-79
TI-2023-00702 CVE-2023-0740 · GHSA-65px-4cpf-697r

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority HIGH 74

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00714 Published 2023-02-08 Fixed in 1.0.4 CWE-79
TI-2023-03820 CVE-2023-4125 · GHSA-j63x-f657-2m9g

Weak Password Requirements in answerdev/answer

Priority HIGH 73

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00883 Published 2023-08-03 Fixed in v1.1.0, 1.1.0 CWE-521
TI-2023-01457 CVE-2023-1543 · GHSA-79hx-g43v-xfmr

Insufficient Session Expiration in answerdev/answer

Priority HIGH 73

Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2023-03-21 Fixed in 1.0.6 CWE-613
TI-2023-03821 CVE-2023-4126 · GHSA-ggcf-hwxp-rc77

Insufficient Session Expiration in answerdev/answer

Priority HIGH 71

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00569 Published 2023-08-03 Fixed in v1.1.0, 1.1.0 CWE-613
TI-2023-03819 CVE-2023-4124 · GHSA-v9vc-7x69-c2x8

Missing Authorization in answerdev/answer

Priority MEDIUM 64

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0065 Published 2023-08-03 Fixed in v1.1.1, 1.1.1 CWE-862
TI-2023-01454 CVE-2023-1540 · GHSA-6x5v-cxpp-pc5x

Observable Response Discrepancy in answerdev/answer

Priority MEDIUM 63

Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-03-21 Fixed in 1.0.6 CWE-204
TI-2023-03822 CVE-2023-4127 · GHSA-52h8-c876-989c

Race Condition within a Thread in answerdev/answer

Priority MEDIUM 60

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00485 Published 2023-08-03 Fixed in v1.1.1, 1.1.1 CWE-366
TI-2023-01456 CVE-2023-1542 · GHSA-r95w-7cpx-h5mx

Business Logic Errors in answerdev/answer

Priority MEDIUM 60

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0075 Published 2023-03-21 Fixed in 1.0.6 CWE-840
TI-2023-01176 CVE-2023-1242 · GHSA-qrwm-xqfr-4vhv

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01175 CVE-2023-1241 · GHSA-ff27-hrmr-ggpj

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01174 CVE-2023-1240 · GHSA-55vm-3vq3-4jpc

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01450 CVE-2023-1536 · GHSA-xvfj-84vc-hrmf

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2023-03-21 Fixed in 1.0.7 CWE-79
TI-2023-01449 CVE-2023-1535 · GHSA-83qr-c7m9-wmgw

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-03-21 Fixed in 1.0.7 CWE-79
TI-2023-01179 CVE-2023-1245 · GHSA-6c32-3x46-m9rh

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00522 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01178 CVE-2023-1244 · GHSA-h85v-cx5m-78wj

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01172 CVE-2023-1238 · GHSA-5w78-v688-cx9q

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00553 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-00885 CVE-2023-0934 · GHSA-6cvf-m58q-h9wf

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00393 Published 2023-02-21 Fixed in 1.0.5 CWE-79
Load more
Open these records in search →