Apache Answer Exposure of Private Information Vulnerability in Revision API
Vulnerability
A vulnerability allowing the exposure of private personal information to unauthorized users has been identified in Apache Answer versions prior to 1.7.1. This issue arises from an unauthenticated API endpoint that improperly reveals the full revision history of deleted content, enabling unauthorized users to access restricted or sensitive information.
Impact
Exploitation of this vulnerability allows unauthorized users to access private personal information and sensitive revision history of deleted content.
Remediation
Users are advised to upgrade to Apache Answer version 2.0.0 or later, which addresses this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.