Affected by GO-2024-3064 and 3 other vulnerabilities

GO-2024-3064: Apache Answer: The link to reset the user's password will remain valid after sending a new link in github.com/apache/incubator-answer

GO-2024-3065: Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer

GO-2024-3158: Apache Answer: Avatar URL leaked user email addresses in github.com/apache/incubator-answer

GO-2024-3287: Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer

internal/

Details

Path	Synopsis
base
conf
constant
cron
data
handler
middleware
pager
reason
server
translator
validator
cli
controller
template_render
controller_admin
entity
install
migrations
repo
activity
activity_common
answer
auth
captcha
collection
comment
config
export
limit
meta
notification
plugin_config
question
rank
reason
report
review
revision
role
search_common
search_sync
site_info
tag
tag_common
unique
user
user_external_login
user_notification_config
router
schema
service
action
activity
activity_common
activity_queue
activity_type
answer_common
auth
collection
collection_common
comment
comment_common
config
content
dashboard
export
follow
meta
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
notice_queue
notification
notification_common
object_info
permission
plugin_common
question_common
rank
reason
reason_common
report
report_common
report_handle
review
revision
revision_common
role
search_common
search_parser
service_config
siteinfo
siteinfo_common
tag
tag_common
unique
uploader
user_admin
user_common
user_external_login
user_notification_config