Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-v3x9-wrq5-868j: Apache Answer: The link for resetting user password is not Single-Use

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.3.5.

The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.

ghsa
#vulnerability#apache#git

Apache Answer: The link for resetting user password is not Single-Use

Moderate severity GitHub Reviewed Published Aug 12, 2024 to the GitHub Advisory Database • Updated Aug 12, 2024

ghsa: Latest News

GHSA-hqmp-g7ph-x543: TunnelVision - decloaking VPNs using DHCP