Answer contains Improper Access Control vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0744 · ADVISORY
• answerdev/answer commit c1fa2b1 · WEB
• answerdev/answer · PACKAGE
• huntr.dev/bounties/35a0e12f-1d54-4fc0-8779-6a4949b7c434 · WEB
• packetstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.html · WEB
• GitHub Advisory GHSA-4cwh-8w4g-jxxh · ADVISORY

Autres vulnérabilités de github.com/answerdev/answer

• CVE-2023-4815ÉLEVÉE 8.8Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
• CVE-2023-4127MOYENNE 5.9Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
• CVE-2023-4126ÉLEVÉE 8.8Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4125ÉLEVÉE 8.8Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4124MOYENNE 6.5Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.