github.com/apache/incubator-answer vulnerabilities (Go)
16 vulnerabilities.
-
github.com/apache/incubator-answerGo Apache Answer: AdminToken not invalidated after admin deactivation 7.2 High -
github.com/apache/incubator-answerGo Apache Answer: Unlisted Questions Accessible via Direct API Access 6.5 Medium -
github.com/apache/incubator-answerGo Apache Answer: HTML Content Injection in Email 5.4 Medium -
github.com/apache/incubator-answerGo Apache Answer: The custom avatar was not properly validated 6.5 Medium -
github.com/apache/incubator-answerGo Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error 6.5 Medium -
github.com/apache/incubator-answerGo Apache Answer: Authorization Bypass in Timeline API 6.1 Medium -
github.com/apache/incubator-answerGo Apache Answer: XSS in AI Answer Rendering 6.1 Medium -
github.com/apache/incubator-answerGo Apache Answer: Predictable Authorization Token Using UUIDv1 2.6 Low -
github.com/apache/incubator-answerGo Apache Answer: Avatar URL leaked user email addresses 5.3 Medium -
github.com/apache/incubator-answerGo Apache Answer: The link for resetting user password is not Single-Use 5.3 Medium -
github.com/apache/incubator-answerGo Apache Answer: The link to reset the user's password will remain valid after sending a new link 5.3 Medium -
github.com/apache/incubator-answerGo Apache Answer: XSS vulnerability when changing personal website 4.6 Medium -
github.com/apache/incubator-answerGo Apache Answer: Pixel Flood Attack by uploading the large pixel file 9.1 Critical -
github.com/apache/incubator-answerGo Apache Answer: XSS vulnerability when submitting summary 5.4 Medium -
github.com/apache/incubator-answerGo Apache Answer: Repeated submission at registration created duplicate users with the same name 5.9 Medium -
github.com/apache/incubator-answerGo Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions. 3.1 Low