MEDIUM🇵🇱 Wersja polska

CVE-2025-29868

CVSS 6.5v3.1pub. 2025-04-01upd. 2025-04-15

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user. Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

  • Apache Answer

    APP
    Apache
    ≤ 1.4.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-22393CRITICAL9.1PL ✓ten sam produkt

Apache Answer — atak Pixel Flood przez nieograniczony upload pliku

CVE-2026-25700HIGH7.2ten sam produkt

Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache A...

CVE-2026-24735HIGH7.5ten sam produkt

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...

CVE-2026-25688MEDIUM6.1ten sam produkt

Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Ans...

CVE-2026-25699MEDIUM6.1ten sam produkt

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...