Apache Answer Externally Referenced Image Privacy Leak Vulnerability

A vulnerability in Apache Answer versions prior to 1.4.2 allows for the leakage of private information, specifically the IP address of users accessing externally referenced images. This issue arises because the image provider can obtain the IP address when the image is accessed. Users are advised to upgrade to version 1.4.5, which addresses this vulnerability by allowing administrators to control the display of external content.

Impact

Exploitation of this vulnerability can lead to unauthorized disclosure of user IP addresses to external image providers.

Remediation

Users should upgrade to Apache Answer version 1.4.5 or later, where the issue is fixed and administrators can manage the display of external content.