Vulnerabilities

TI-2023-01457 CVE-2023-1543 · GHSA-79hx-g43v-xfmr

Insufficient Session Expiration in answerdev/answer

HIGH 73

Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2023-03-21 Fixed in 1.0.6 CWE-613

TI-2023-01456 CVE-2023-1542 · GHSA-r95w-7cpx-h5mx

MEDIUM 60

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0075 Published 2023-03-21 Fixed in 1.0.6 CWE-840

TI-2023-01455 CVE-2023-1541 · GHSA-h2wg-83fc-xvm9

MEDIUM 51

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00644 Published 2023-03-21 Fixed in 1.0.6 CWE-840

TI-2023-01454 CVE-2023-1540 · GHSA-6x5v-cxpp-pc5x

MEDIUM 63

Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-03-21 Fixed in 1.0.6 CWE-204

TI-2023-01453 CVE-2023-1539 · GHSA-g44v-6qfm-f6ch

MEDIUM 57

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00614 Published 2023-03-21 Fixed in 1.0.6 CWE-307

TI-2023-01452 CVE-2023-1538 · GHSA-rvjp-8qj4-8p29

MEDIUM 57

Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-03-21 Fixed in 1.0.6 CWE-208

TI-2023-01451 CVE-2023-1537 · GHSA-hwj7-frgj-7829

HIGH 75

Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00837 Published 2023-03-21 Fixed in 1.0.6 CWE-294