CVE-2026-60023 in Answerinformation

Résumé

par MITRE • 05/08/2026

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsable

Apache

Réserver

08/07/2026

Divulgation

05/08/2026

Modérer

accepté

Entrée

VDB-386248

CPE

prêt

EPSS

0.00000

KEV

non

Activités

faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!