NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#apache-answer

0 stories this week · 13 this month · 13 in 6 months · mostly security

Stories per day · 30 days

Relatedoss-security7 authorization5 information-disclosure5 apache4 access-control2 authentication2 oss2 account-takeover1 api-keys1 authorization-bypass1 credential-leak1 cve-2026-649431 cve-2026-649441 cve-2026-649451 cve-2026-672491 cve-2026-684821 cve-2026-715631 cve-2026-769941

3 stories, newest first · one card per story

oss-security14d ago

CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content

Apache Answer through 2.0.2 lets unauthorized users read or change reaction metadata on restricted content.

8 sources apache-answer cve-2026-90910

3

oss-security14d ago

CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content

Apache Answer through 2.0.2 stores imported question HTML unsanitized, enabling stored cross-site scripting.

3 sources apache-answer xss

2

oss-security14d ago

CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover

Apache Answer email-code confusion through 2.0.2 may allow account takeover.

2 sources apache apache-answer

4