MEDIUM🇬🇧 English

CVE-2026-25688

CVSS 6.1v3.1pub. 2026-06-09upd. 2026-06-10

Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. AI-generated response content was rendered in the browser without proper sanitization, allowing malicious scripts to be executed when the content was viewed. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Apache Answer

    APP
    Apache
    < 2.0.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2024-22393CRITICAL9.1PL ✓ten sam produkt

Apache Answer — atak Pixel Flood przez nieograniczony upload pliku

CVE-2026-25700HIGH7.2ten sam produkt

Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache A...

CVE-2026-24735HIGH7.5ten sam produkt

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...

CVE-2026-25699MEDIUM6.1ten sam produkt

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...

CVE-2026-33582MEDIUM6.5ten sam produkt

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Ans...