Affected by GO-2024-3064
and 3 other vulnerabilities
GO-2024-3064: Apache Answer: The link to reset the user's password will remain valid after sending a new link in github.com/apache/incubator-answer
GO-2024-3065: Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer
GO-2024-3158: Apache Answer: Avatar URL leaked user email addresses in github.com/apache/incubator-answer
GO-2024-3287: Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
directory
Version:
v1.3.5-RC1
Opens a new window with list of versions in this module.
Published: Jun 18, 2024
License: Apache-2.0
Opens a new window with license information.
Directories
¶
Click to show internal directories.
Click to hide internal directories.