github.com/apache/answer

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.2

CVE-2026-25700

Apache Answer: AdminToken not invalidated after admin deactivation

Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivat…

Apache Software Foundation Apache Answer github.com/apache/incubator-answer github.com/apache/answer Go

Jun 10, 2026
High 7.5

CVE-2026-24735

Apache Answer: Revision API Improper Access Control leads to Information Disclosure

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 1.7.1. An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unaut…

Apache Software Foundation Apache Answer github.com/apache/answer Go

Feb 4, 2026