Skip to content
OpenAdvisories
High · 7.5 CVE-2026-76994 EUVD-2026-104159GHSA-j4f7-j6xw-2g4m

Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles

Published Oct 19, 2026 · Updated Nov 3, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Answer

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.2.

Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles.

Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Answer ≤ 2.0.2 —

References