CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-4815HIGH | Missing Authentication for Critical Function in answerdev/answerMissing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. CWE-306Sep 7, 2023 | CVSS8.8v3.1 | EPSS0.682% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4127MEDIUM | Race Condition within a Thread in answerdev/answerRace Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1. CWE-366Aug 3, 2023 | CVSS5.9v3.1 | EPSS0.485% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4126HIGH | Insufficient Session Expiration in answerdev/answerInsufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0. CWE-613Aug 3, 2023 | CVSS8.8v3.1 | EPSS0.569% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4125HIGH | Weak Password Requirements in answerdev/answerWeak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0. CWE-521Aug 3, 2023 | CVSS8.8v3.1 | EPSS0.883% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4124MEDIUM | Missing Authorization in answerdev/answerMissing Authorization in GitHub repository answerdev/answer prior to v1.1.1. CWE-862Aug 3, 2023 | CVSS6.5v3.1 | EPSS0.65% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Missing Authorization in answerdev/answerMissing Authorization in GitHub repository answerdev/answer prior to 1.0.9. CWE-862May 9, 2023 | CVSS3.5v3.1 | EPSS0.462% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-1976HIGH | Password Aging with Long Expiration in answerdev/answerPassword Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. CWE-263Apr 11, 2023 | CVSS8.8v3.1 | EPSS0.607% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1974MEDIUM | Exposure of Sensitive Information Through Metadata in answerdev/answerExposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. CWE-1230Apr 11, 2023 | CVSS6.5v3.1 | EPSS0.597% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1975MEDIUM | Insertion of Sensitive Information Into Sent Data in answerdev/answerInsertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. CWE-201Apr 11, 2023 | CVSS6.5v3.1 | EPSS0.586% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1540MEDIUM | Observable Response Discrepancy in answerdev/answerObservable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.639% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1535MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. CWE-79Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.536% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1543HIGH | Insufficient Session Expiration in answerdev/answerInsufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6. CWE-613Mar 21, 2023 | CVSS8.8v3.1 | EPSS0.775% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Business Logic Errors in answerdev/answerBusiness Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. CWE-840Mar 21, 2023 | CVSS3.8v3.1 | EPSS0.644% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-1536MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. CWE-79Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.518% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1537CRITICAL | Authentication Bypass by Capture-replay in answerdev/answerAuthentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. CWE-294Mar 21, 2023 | CVSS9.8v3.1 | EPSS0.837% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1539MEDIUM | Improper Restriction of Excessive Authentication Attempts in answerdev/answerImproper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.614% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1542MEDIUM | Business Logic Errors in answerdev/answerBusiness Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. CWE-840Mar 21, 2023 | CVSS5.4v3.1 | EPSS0.75% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1538MEDIUM | Observable Timing Discrepancy in answerdev/answerObservable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | CVSS5.3v3.1 | EPSS0.639% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1237MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.44% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1238MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.553% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1242MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1241MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1245MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.522% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1240MEDIUM | Cross-site Scripting (XSS) - Stored in answerdev/answerCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS5.4v3.1 | EPSS0.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1239MEDIUM | Cross-site Scripting (XSS) - Reflected in answerdev/answerCross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6. CWE-79Mar 7, 2023 | CVSS4.8v3.1 | EPSS0.526% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |