Vulnerabilities

TI-2023-00706 CVE-2023-0744 · GHSA-4cwh-8w4g-jxxh

Improper Access Control in answerdev/answer

HIGH 82

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06368 Published 2023-02-08 Fixed in 1.0.4 CWE-284

TI-2023-00705 CVE-2023-0743 · GHSA-hjmr-xm25-36mh

HIGH 74

Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00745 Published 2023-02-08 Fixed in 1.0.4 CWE-79

TI-2023-00704 CVE-2023-0742 · GHSA-rmw8-7823-wp7f

HIGH 74

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00871 Published 2023-02-08 Fixed in 1.0.4 CWE-79

TI-2023-00703 CVE-2023-0741 · GHSA-p7wj-c85f-xq9h

HIGH 74

Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00871 Published 2023-02-08 Fixed in 1.0.4 CWE-79

TI-2023-00702 CVE-2023-0740 · GHSA-65px-4cpf-697r

HIGH 74

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00714 Published 2023-02-08 Fixed in 1.0.4 CWE-79

TI-2023-00701 CVE-2023-0739 · GHSA-qx34-47fc-vv79

MEDIUM 63

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.0069 Published 2023-02-08 Fixed in 1.0.4 CWE-362