Affected by GO-2024-2457 and 8 other vulnerabilities

GO-2024-2457: Apache Answer Race Condition vulnerability in github.com/apache/incubator-answer

GO-2024-2578: Apache Answer Cross-site Scripting vulnerability in github.com/apache/incubator-answer

GO-2024-2579: Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/incubator-answer

GO-2024-2580: Apache Answer Race Condition vulnerability in github.com/apache/incubator-answer

GO-2024-2743: XSS vulnerability via personal website in github.com/apache/incubator-answer

GO-2024-3064: Apache Answer: The link to reset the user's password will remain valid after sending a new link in github.com/apache/incubator-answer

GO-2024-3065: Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer

GO-2024-3158: Apache Answer: Avatar URL leaked user email addresses in github.com/apache/incubator-answer

GO-2024-3287: Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer

incubator-answer

module

v1.2.1-RC1 Latest Latest Go to latest Published: Dec 14, 2023 License: Apache-2.0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/apache/incubator-answer

README ¶

Apache Answer - Build Q&A platform

A Q&A platform software for teams at any scales. Whether it’s a community forum, help center, or knowledge management platform, you can always count on Answer.

To learn more about the project, visit answer.apache.org.

Screenshots

screenshot

Quick start

Running with docker

docker run -d -p 9080:80 -v answer-data:/data --name answer apache/answer:latest

For more information, see Installation

Plugins

Answer provides a plugin system for developers to create custom plugins and expand Answer’s features. You can find the plugin documentation here.

We value your feedback and suggestions to improve our documentation. If you have any comments or questions, please feel free to contact us. We’re excited to see what you can create using our plugin system!

You can also check out the plugins here.

Building from Source

Prerequisites

Golang >= 1.18
Node.js >= 16.17
pnpm >= 8

Build

$ make ui
$ make build

Contributing

Contributions are always welcome!

See CONTRIBUTING for ways to get started.

License

Apache License 2.0

Directories ¶

Path	Synopsis
cmd
answer
configs
docs
i18n
internal
base/conf
base/constant
base/cron
base/data
base/handler
base/middleware
base/pager
base/reason
base/server
base/translator
base/validator
cli
controller
controller/template_render
controller_admin
entity
install
migrations
repo
repo/activity
repo/activity_common
repo/answer
repo/auth
repo/captcha
repo/collection
repo/comment
repo/config
repo/export
repo/limit
repo/meta
repo/notification
repo/plugin_config
repo/question
repo/rank
repo/reason
repo/report
repo/revision
repo/role
repo/search_common
repo/search_sync
repo/site_info
repo/tag
repo/tag_common
repo/unique
repo/user
repo/user_external_login
repo/user_notification_config
router
schema
service
service/action
service/activity
service/activity_common
service/activity_queue
service/activity_type
service/answer_common
service/auth
service/collection_common
service/comment
service/comment_common
service/config
service/dashboard
service/export
service/follow
service/meta
service/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
service/notice_queue
service/notification
service/notification_common
service/object_info
service/permission
service/plugin_common
service/question_common
service/rank
service/reason
service/reason_common
service/report
service/report_admin
service/report_common
service/report_handle_admin
service/revision
service/revision_common
service/role
service/search_common
service/search_parser
service/service_config
service/siteinfo
service/siteinfo_common
service/tag
service/tag_common
service/unique
service/uploader
service/user_admin
service/user_common
service/user_external_login
service/user_notification_config
pkg
checker
converter
day
dir
display
encryption
gravatar
htmltext
obj
random
token
uid
writer
plugin
ui

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL