Medium · 5.3 CVE-2026-79613 EUVD-2026-104160GHSA-8gxm-7cvr-5vpw

Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

Published Oct 19, 2026 · Updated Nov 3, 2026 · Assigned by apache

Description

vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.2.

Unauthenticated attackers could access comments associated with non-public content through public user profiles.

Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Answer	≤ 2.0.2	—