Sensitive Information Exposure in Apache Answer by Vendor Apache
CVE-2026-79620

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Answer
Vendor
CVE Published:
19 October 2026

What is CVE-2026-79620?

Apache Answer has a vulnerability that allows authenticated users to access metadata of non-public questions due to an improper authorization check in the similar-question search feature. This flaw, found in version 2.0.2, could lead to unintentional exposure of sensitive information. Users are advised to upgrade to version 2.0.3 to mitigate this risk and ensure that sensitive data remains protected.

Affected Version(s)

Apache Answer 0 <= 2.0.2

References

https://lists.apache.org/thread/p6oqj9b27o4nppc0kv00rn7yb...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

n0mi1k
.