What’s Vulnerable › Vulnerabilities

CVE-2023-49619: Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-10 · updated 2026-06-17
• Weakness: CWE-362

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the issue.

Affected products

• Apache Software Foundation Apache Answer: before 1.2.1 — fixed in 1.2.1

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache Answer 1.2.1. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2024/01/10/1
• https://lists.apache.org/thread/nscrl3c7pn68q4j73y3ottql6n5x3hd4
• http://www.openwall.com/lists/oss-security/2024/01/10/1
• https://lists.apache.org/thread/nscrl3c7pn68q4j73y3ottql6n5x3hd4

Get alerted when CVE-2023-49619 or the next vulnerability affects your stack