Go modules package
github.com/answerdev/answer
pkg:golang/github.com/answerdev/answer
Vulnerabilities (34)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-4815 | Hig | 8.8 | < 1.1.3 | 1.1.3 | Sep 7, 2023 | Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. | |
| CVE-2023-4127 | Med | 5.9 | < 1.1.1 | 1.1.1 | Aug 3, 2023 | Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1. | |
| CVE-2023-4126 | Hig | 8.8 | < 1.1.0 | 1.1.0 | Aug 3, 2023 | Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0. | |
| CVE-2023-4125 | Hig | 8.8 | < 1.1.0 | 1.1.0 | Aug 3, 2023 | Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0. | |
| CVE-2023-4124 | Med | 6.5 | < 1.1.1 | 1.1.1 | Aug 3, 2023 | Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1. | |
| CVE-2023-2590 | Low | 3.5 | < 1.0.9 | 1.0.9 | May 9, 2023 | Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9. | |
| CVE-2023-1976 | Hig | 8.8 | < 1.0.6 | 1.0.6 | Apr 11, 2023 | Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1975 | Med | 6.5 | < 1.0.8 | 1.0.8 | Apr 11, 2023 | Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. | |
| CVE-2023-1974 | Med | 6.5 | < 1.0.8 | 1.0.8 | Apr 11, 2023 | Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. | |
| CVE-2023-1543 | Hig | 8.8 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1542 | Med | 5.4 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1541 | Low | 3.8 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1540 | Med | 5.3 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1539 | Med | 5.3 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1538 | Med | 5.3 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1537 | Cri | 9.8 | < 1.0.6 | 1.0.6 | Mar 21, 2023 | Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1536 | Med | 5.4 | < 1.0.7 | 1.0.7 | Mar 21, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. | |
| CVE-2023-1535 | Med | 5.4 | < 1.0.7 | 1.0.7 | Mar 21, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. | |
| CVE-2023-1245 | Med | 5.4 | < 1.0.6 | 1.0.6 | Mar 7, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. | |
| CVE-2023-1244 | Med | 5.4 | < 1.0.6 | 1.0.6 | Mar 7, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
- affected < 1.1.3fixed 1.1.3
Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
- affected < 1.1.1fixed 1.1.1
Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
- affected < 1.1.0fixed 1.1.0
Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
- affected < 1.1.0fixed 1.1.0
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
- affected < 1.1.1fixed 1.1.1
Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.
- affected < 1.0.9fixed 1.0.9
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.
- affected < 1.0.6fixed 1.0.6
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.8fixed 1.0.8
Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.
- affected < 1.0.8fixed 1.0.8
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
- affected < 1.0.6fixed 1.0.6
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.7fixed 1.0.7
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
- affected < 1.0.7fixed 1.0.7
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
- affected < 1.0.6fixed 1.0.6
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
- affected < 1.0.6fixed 1.0.6
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
Page 1 of 2