CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
Apache Answer through 2.0.2 let authenticated users modify non-public content they should not access.
42
CVE-2026-79633
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
- Weakness
- CWE-202