https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T19:32:40.132688+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-60023 CVE-2026-60023 — Apache Answer: Unauthorized disclosure of deleted or pending answer content 2026-10-01T19:32:40.149612+00:00

Affected: Apache Software Foundation Apache Answer

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible. Users are recommended to upgrade to version 2.0.2, which fixes the issue.