CVE-2026-79613

Published: Oct 19, 2026Modified: Oct 19, 2026Deferred

Description

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Related CWEs

CWE-202

Exposure of Sensitive Information Through Data Queries

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

References (2)

https://lists.apache.org/thread/grsm88msk5psc4r5jy5fqmlb5g6p7797

Source: security@apache.org

http://www.openwall.com/lists/oss-security/2026/10/16/29

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.