Live › vulnerability › CVE-2026-79620
Go to dashboardApache Answer through 2.0.2 has an improper authorization check in its similar-question search. An authenticated user can view metadata of questions that are not public.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Apache Answer through version 2.0.2 where users have accounts and some questions are non-public. Instances where all questions are public, or where only trusted users can log in, have less to lose. The sources do not describe a specific configuration beyond the affected version range.
No product ranges from the sources yet.
2.0.2 are affected.2.0.3, which fixes the issue.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of sensitive information through data queries vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-79620")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.