Apache Answer Unrestricted File Upload Vulnerability Leading to Denial-of-Service

Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in Apache Answer versions prior to 2.0.0. This issue arises when a crafted TIFF image is uploaded, triggering excessive memory allocation during the decoding process. As a result, an authenticated user could cause the server process to crash.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server process to crash.

Remediation

Users are advised to upgrade to Apache Answer version 2.0.1 or later, which addresses this vulnerability.

Added: Jun 9, 2026, 9:34 AM
Updated: Jun 9, 2026, 9:34 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
0.0
relevance
9.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.