Medium severity6.5NVD Advisory· Published Jun 9, 2026· Updated Jun 10, 2026

CVE-2026-34031

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to unintended external requests and tracking by third-party servers. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Answer2 versions
cpe:2.3:a:apache:answer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:answer:*:*:*:*:*:*:*:*range: <2.0.1
- (no CPE)range: <=2.0.0

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/06/09/4nvdMailing ListThird Party Advisory
lists.apache.org/thread/rwtxy39t54to9kv3dqtbjsbdpyk4jkd2nvdMailing ListVendor Advisory

News mentions

Apache HTTP Server and Answer: 22 Vulnerabilities Disclosed, Including Critical Flaws
Vypr Intelligence · Jun 10, 2026

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000