Answer contains Cross-site Scripting vulnerability

CRÍTICO 9.0CVE-2023-0742 · GHSA-rmw8-7823-wp7f · GO-2023-1554 · Published 08/02/2023 · updated 17/06/2026

En resumen

CVE-2023-0742 es una vulnerabilidad CRÍTICO (CVSS 9.0) que afecta a github.com/answerdev/answer, answer (answer).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.87%, mayor que el 58.9% de las vulnerabilidades.
Solución: actualizar a 1.0.4 o posterior.

Package	Affected versions	Patched versions
github.com/answerdev/answer Go	`< 1.0.4`	`1.0.4`
answer answer	`< 1.0.4`	`1.0.4`

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

NVD description

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.0.4

1.0.4

< 1.0.4

1.0.4

Más vulnerabilidades de github.com/answerdev/answer

Ver todo →