Volerion logoVolerion
Volerion logoVolerion

Apache Answer Authorization Bypass Vulnerability in Timeline API Allowing Access to Private Information

Vulnerability

An authorization bypass vulnerability has been identified in Apache Answer versions prior to 2.0.0. This issue allows authenticated users to access deleted, private, or unapproved content and its revision history through timeline-related APIs, which lacked proper authorization checks. As a result, private personal information could be exposed to unauthorized individuals.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private personal information, including deleted or unapproved content and its revision history.

Remediation

Users are advised to upgrade to Apache Answer version 2.0.1 or later, which addresses this vulnerability.

Added: Jun 9, 2026, 9:37 AM
Updated: Jun 9, 2026, 9:37 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
5.2
remediation
0.0
relevance
9.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.