Vulnerabilities

Missing Authorization vulnerability in Apache Answer.

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Apache Software Foundation

Product

Other Apache projects

Fix

available

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-68482 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 13d ago

   vulnerability in Apache Answer.

   Fix available CVE-2026-79633 Apache Software Foundation
2. 10
   CVE NVD 13d ago

   vulnerability in Apache Answer.

   Fix available CVE-2026-79613 Apache Software Foundation
3. 10
   CVE NVD 13d ago

   Missing Authorization vulnerability in Apache Answer.

   Fix available CVE-2026-71563 Apache Software Foundation
4. 10
   CVE NVD 13d ago

   A vulnerability in Apache Answer.

   Fix available CVE-2026-67249 Apache Software Foundation
5. 10
   CVE NVD 13d ago

   A vulnerability in Apache Answer.

   Fix available CVE-2026-64945 Apache Software Foundation