Browse CVEs

HIGH 8.8 CVE-2023-4815 Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. Answer 1.1.3+ Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-4125 Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0. Answer 1.1.0+ Fix from $1,9502023-08-03 HIGH 8.8 CVE-2023-4126 Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0. Answer 1.1.0+ Fix from $1,9502023-08-03 MEDIUM 6.5 CVE-2023-4124 Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1. Answer 1.1.1+ Fix from $1,6002023-08-03 MEDIUM 5.9 CVE-2023-4127 Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1. Answer 1.1.1+ Fix from $1,6002023-08-03 HIGH 8.8 CVE-2023-1976 Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,9502023-04-11 MEDIUM 6.5 CVE-2023-1975 Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. Answer 1.0.8+ Fix from $1,6002023-04-11 MEDIUM 6.5 CVE-2023-1974 Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. Answer 1.0.8+ Fix from $1,6002023-04-11 HIGH 8.8 CVE-2023-1543 Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,9502023-03-21 MEDIUM 5.4 CVE-2023-1542 Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-21 CRITICAL 9.8 CVE-2023-1537 Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $2,3002023-03-21 MEDIUM 5.4 CVE-2023-1536 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. Answer 1.0.7+ Fix from $1,6002023-03-21 MEDIUM 5.3 CVE-2023-1538 Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-21 MEDIUM 5.3 CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-21 MEDIUM 5.3 CVE-2023-1540 Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-21 MEDIUM 5.4 CVE-2023-1535 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. Answer 1.0.7+ Fix from $1,6002023-03-21 MEDIUM 5.4 CVE-2023-1245 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1238 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1240 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1241 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1242 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1244 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-1237 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Answer 1.0.6+ Fix from $1,6002023-03-07 MEDIUM 5.4 CVE-2023-0934 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5. Answer 1.0.5+ Fix from $1,6002023-02-21 CRITICAL 9.8 CVE-2023-0744EPSS 6% Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $2,3002023-02-08 CRITICAL 9.0 CVE-2023-0740 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $2,3002023-02-08 CRITICAL 9.0 CVE-2023-0741 Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $2,3002023-02-08 CRITICAL 9.0 CVE-2023-0742 Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $2,3002023-02-08 CRITICAL 9.0 CVE-2023-0743 Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $2,3002023-02-08 MEDIUM 6.8 CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4. Answer 1.0.4+ Fix from $1,6002023-02-08