Go Package Vulnerabilities
Vulnerabilities associated with github.com/answerdev/answer.
Packages
Clear package- github.com/mattermost/mattermost/server/v8199 vulnerabilities
- github.com/mattermost/mattermost-server178 vulnerabilities
- code.gitea.io/gitea94 vulnerabilities
- gogs.io/gogs76 vulnerabilities
- github.com/usememos/memos74 vulnerabilities
- github.com/grafana/grafana61 vulnerabilities
- github.com/rancher/rancher61 vulnerabilities
- github.com/siyuan-note/siyuan/kernel58 vulnerabilities
- github.com/hashicorp/vault55 vulnerabilities
- github.com/traefik/traefik/v253 vulnerabilities
- github.com/traefik/traefik/v352 vulnerabilities
- github.com/mattermost/mattermost-server/v647 vulnerabilities
- github.com/filebrowser/filebrowser/v243 vulnerabilities
- k8s.io/kubernetes43 vulnerabilities
- github.com/zitadel/zitadel41 vulnerabilities
- github.com/argoproj/argo-cd/v237 vulnerabilities
- github.com/cilium/cilium37 vulnerabilities
- github.com/docker/docker36 vulnerabilities
- github.com/answerdev/answer34 vulnerabilities
- github.com/argoproj/argo-cd34 vulnerabilities
- github.com/hashicorp/nomad34 vulnerabilities
- code.vikunja.io/api33 vulnerabilities
- github.com/hashicorp/consul32 vulnerabilities
- github.com/openbao/openbao29 vulnerabilities
- github.com/traefik/traefik29 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-4815HIGH | Missing Authentication for Critical Function in answerdev/answerMissing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. CWE-306Sep 7, 2023 | CVSS8.8v3.1 | EPSS0.682% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4127MEDIUM | Race Condition within a Thread in answerdev/answerRace Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1. CWE-366Aug 3, 2023 | CVSS5.9v3.1 | EPSS0.485% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4126HIGH | Insufficient Session Expiration in answerdev/answerInsufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0. CWE-613Aug 3, 2023 | CVSS8.8v3.1 | EPSS0.569% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4125HIGH | Weak Password Requirements in answerdev/answerWeak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0. CWE-521Aug 3, 2023 | CVSS8.8v3.1 | EPSS0.883% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4124MEDIUM | Missing Authorization in answerdev/answerMissing Authorization in GitHub repository answerdev/answer prior to v1.1.1. CWE-862Aug 3, 2023 | CVSS6.5v3.1 | EPSS0.65% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Missing Authorization in answerdev/answerMissing Authorization in GitHub repository answerdev/answer prior to 1.0.9. CWE-862May 9, 2023 | CVSS3.5v3.1 | EPSS0.462% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-1976HIGH | Password Aging with Long Expiration in answerdev/answerPassword Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. CWE-263Apr 11, 2023 | CVSS8.8v3.1 | EPSS0.607% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1974MEDIUM | Exposure of Sensitive Information Through Metadata in answerdev/answerExposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. CWE-1230Apr 11, 2023 | CVSS6.5v3.1 | EPSS0.597% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1975MEDIUM | Insertion of Sensitive Information Into Sent Data in answerdev/answerInsertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. CWE-201Apr 11, 2023 | CVSS6.5v3.1 | EPSS0.586% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1540MEDIUM | Observable Response Discrepancy in answerdev/answerObservable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.639% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1535MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. CWE-79Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.536% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1543HIGH | Insufficient Session Expiration in answerdev/answerInsufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6. CWE-613Mar 21, 2023 | CVSS8.8v3.1 | EPSS0.775% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Business Logic Errors in answerdev/answerBusiness Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. CWE-840Mar 21, 2023 | CVSS3.8v3.1 | EPSS0.644% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-1536MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. CWE-79Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.518% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1537CRITICAL | Authentication Bypass by Capture-replay in answerdev/answerAuthentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. CWE-294Mar 21, 2023 | CVSS9.8v3.1 | EPSS0.837% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1539MEDIUM | Improper Restriction of Excessive Authentication Attempts in answerdev/answerImproper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.614% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1542MEDIUM | Business Logic Errors in answerdev/answerBusiness Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. CWE-840Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.75% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1538MEDIUM | Observable Timing Discrepancy in answerdev/answerObservable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.639% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1237MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.44% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1238MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.553% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1242MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1241MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1245MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.522% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1240MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1239MEDIUM | Cross-site Scripting (XSS) - Reflected in answerdev/answerCross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS4.8v3.1 | EPSS0.526% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |