Affected by GO-2023-1541 and 33 other vulnerabilities

GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

answer

module

v1.0.1 Latest Latest Go to latest Published: Dec 24, 2022 License: Apache-2.0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/answerdev/answer

Links

Open Source Insights

README ¶

Answer - Build Q&A community

An open-source knowledge-based community software. You can use it to quickly build your Q&A community for product technical support, customer support, user communication, and more.

To learn more about the project, visit answer.dev.

Screenshots

screenshot

Quick start

Running with docker

docker run -d -p 9080:80 -v answer-data:/data --name answer answerdev/answer:latest

For more information, see INSTALL.md

Contributing

Contributions are always welcome!

See CONTRIBUTING.md for ways to get started.

License

Apache License 2.0

Directories ¶

Path	Synopsis
cmd
answer
configs
docs Package docs GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag	Package docs GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag
i18n
internal
base/conf
base/constant
base/cron
base/data
base/handler
base/middleware
base/pager
base/reason
base/server
base/translator
base/validator
cli
controller
controller/template_render
controller_admin
entity
install
migrations
repo
repo/activity
repo/activity_common
repo/answer
repo/auth
repo/captcha
repo/collection
repo/comment
repo/common
repo/config
repo/export
repo/meta
repo/notification
repo/question
repo/rank
repo/reason
repo/report
repo/revision
repo/role
repo/search_common
repo/site_info
repo/tag
repo/tag_common
repo/unique
repo/user
router
schema
service
service/action
service/activity
service/activity_common
service/activity_queue
service/activity_type
service/answer_common
service/auth
service/collection_common
service/comment
service/comment_common
service/config
service/dashboard
service/export
service/follow
service/meta
service/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
service/notice_queue
service/notification
service/notification_common
service/object_info
service/permission
service/question_common
service/rank
service/reason
service/reason_common
service/report
service/report_admin
service/report_common
service/report_handle_admin
service/revision
service/revision_common
service/role
service/search_common
service/search_parser
service/service_config
service/siteinfo
service/siteinfo_common
service/tag
service/tag_common
service/unique
service/uploader
service/user_admin
service/user_common
pkg
checker
converter
day
dir
gravatar
htmltext
obj
token
uid
writer
ui

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL