Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

34 records

Vendor: answerdev Component: Answer Clear all filters
TI-2023-03822 CVE-2023-4127 · GHSA-52h8-c876-989c

Race Condition within a Thread in answerdev/answer

Priority MEDIUM 60

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00485 Published 2023-08-03 Fixed in v1.1.1, 1.1.1 CWE-366
TI-2023-03821 CVE-2023-4126 · GHSA-ggcf-hwxp-rc77

Insufficient Session Expiration in answerdev/answer

Priority HIGH 71

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00569 Published 2023-08-03 Fixed in v1.1.0, 1.1.0 CWE-613
TI-2023-03820 CVE-2023-4125 · GHSA-j63x-f657-2m9g

Weak Password Requirements in answerdev/answer

Priority HIGH 73

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00883 Published 2023-08-03 Fixed in v1.1.0, 1.1.0 CWE-521
TI-2023-03819 CVE-2023-4124 · GHSA-v9vc-7x69-c2x8

Missing Authorization in answerdev/answer

Priority MEDIUM 64

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0065 Published 2023-08-03 Fixed in v1.1.1, 1.1.1 CWE-862
TI-2023-02420 CVE-2023-2590 · GHSA-qmqw-r4x6-3w2q

Missing Authorization in answerdev/answer

Priority MEDIUM 50

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00462 Published 2023-05-09 Fixed in 1.0.9 CWE-862
TI-2023-01457 CVE-2023-1543 · GHSA-79hx-g43v-xfmr

Insufficient Session Expiration in answerdev/answer

Priority HIGH 73

Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2023-03-21 Fixed in 1.0.6 CWE-613
TI-2023-01456 CVE-2023-1542 · GHSA-r95w-7cpx-h5mx

Business Logic Errors in answerdev/answer

Priority MEDIUM 60

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0075 Published 2023-03-21 Fixed in 1.0.6 CWE-840
TI-2023-01455 CVE-2023-1541 · GHSA-h2wg-83fc-xvm9

Business Logic Errors in answerdev/answer

Priority MEDIUM 51

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00644 Published 2023-03-21 Fixed in 1.0.6 CWE-840
TI-2023-01454 CVE-2023-1540 · GHSA-6x5v-cxpp-pc5x

Observable Response Discrepancy in answerdev/answer

Priority MEDIUM 63

Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-03-21 Fixed in 1.0.6 CWE-204
TI-2023-01452 CVE-2023-1538 · GHSA-rvjp-8qj4-8p29

Observable Timing Discrepancy in answerdev/answer

Priority MEDIUM 57

Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-03-21 Fixed in 1.0.6 CWE-208
TI-2023-01450 CVE-2023-1536 · GHSA-xvfj-84vc-hrmf

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2023-03-21 Fixed in 1.0.7 CWE-79
TI-2023-01449 CVE-2023-1535 · GHSA-83qr-c7m9-wmgw

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-03-21 Fixed in 1.0.7 CWE-79
TI-2023-01179 CVE-2023-1245 · GHSA-6c32-3x46-m9rh

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00522 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01178 CVE-2023-1244 · GHSA-h85v-cx5m-78wj

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01177 CVE-2023-1243 · GHSA-8jh8-33f5-cgfp

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00526 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01176 CVE-2023-1242 · GHSA-qrwm-xqfr-4vhv

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01175 CVE-2023-1241 · GHSA-ff27-hrmr-ggpj

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
TI-2023-01174 CVE-2023-1240 · GHSA-55vm-3vq3-4jpc

Cross-site Scripting (XSS) - Stored in answerdev/answer

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.6 CWE-79
Load more