Answerdevanswer (Answerdev) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-09-07. Vendor: Answerdev.

CVEs of Answerdevanswer

• CVE-2023-4815 - CVSS 8.8 (high), 2023-09-07: Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
• CVE-2023-4125 - CVSS 8.8 (high), 2023-08-03: Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4124 - CVSS 8.1 (high), 2023-08-03: Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.
• CVE-2023-4127 - CVSS 6.5 (medium), 2023-08-03: Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
• CVE-2023-4126 - CVSS 8.8 (high), 2023-08-03: Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-2590 - CVSS 7.7 (high), 2023-05-09: Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.
• CVE-2023-1976 - CVSS 8.8 (high), 2023-04-11: Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1975 - CVSS 7.6 (high), 2023-04-11: Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.
• CVE-2023-1974 - CVSS 7.7 (high), 2023-04-11: Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
• CVE-2023-1543 - CVSS 8.8 (high), 2023-03-21: Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1542 - CVSS 8.1 (high), 2023-03-21: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1541 - CVSS 6 (medium), 2023-03-21: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1537 - CVSS 9.8 (critical), 2023-03-21: Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1540 - CVSS 5.3 (medium), 2023-03-21: Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1536 - CVSS 7.6 (high), 2023-03-21: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
• CVE-2023-1539 - CVSS 5.3 (medium), 2023-03-21: Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1538 - CVSS 5.3 (medium), 2023-03-21: Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1535 - CVSS 8.3 (high), 2023-03-21: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
• CVE-2023-1245 - CVSS 5.4 (medium), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1238 - CVSS 7.6 (high), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1241 - CVSS 8.8 (high), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1244 - CVSS 9.3 (critical), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1240 - CVSS 8 (high), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1243 - CVSS 6 (medium), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1239 - CVSS 6 (medium), 2023-03-07: Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1242 - CVSS 8 (high), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-1237 - CVSS 5.4 (medium), 2023-03-07: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
• CVE-2023-0934 - CVSS 6.3 (medium), 2023-02-21: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.
• CVE-2023-0741 - CVSS 9 (critical), 2023-02-08: Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.
• CVE-2023-0744 - CVSS 9.8 (critical), 2023-02-08: Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.
• CVE-2023-0740 - CVSS 9 (critical), 2023-02-08: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
• CVE-2023-0743 - CVSS 9 (critical), 2023-02-08: Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.
• CVE-2023-0742 - CVSS 9 (critical), 2023-02-08: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
• CVE-2023-0739 - CVSS 8.1 (high), 2023-02-08: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.