Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Apache Answer — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Apache Answer, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-24735 Apache Answer: Revision API Improper Access Control leads to Information Disclosure CWE-359 5.3AIMediumAI2026-02-04
CVE-2025-29868 Apache Answer: Using externally referenced images can leak user privacy. CWE-495 6.5 -2025-04-01
CVE-2024-45719 Apache Answer: Predictable Authorization Token Using UUIDv1 CWE-326 7.5 -2024-11-22
CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses CWE-326 7.5AIHighAI2024-09-25
CVE-2024-41888 Apache Answer: The link for resetting user password is not Single-Use CWE-772 7.5AIHighAI2024-08-09
CVE-2024-41890 Apache Answer: The link to reset the user's password will remain valid after sending a new link CWE-772 7.5AIHighAI2024-08-09
CVE-2024-29217 Apache Answer: XSS vulnerability when changing personal website CWE-79 5.4 -2024-04-21
CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file CWE-434 6.5 -2024-02-22
CVE-2024-23349 Apache Answer: XSS vulnerability when submitting summary CWE-79 5.4 -2024-02-22
CVE-2024-26578 Apache Answer: Repeated submission at registration created duplicate users with the same name CWE-362 7.4 -2024-02-22
CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions. CWE-362--AI2024-01-10

All 11 known CVE vulnerabilities affecting Apache Answer with full Chinese analysis, references, and POCs where available.