一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-60023 [HIGH] – Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.

未分类
📑 文章目录

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible.
Users are recommended to upgrade to version 2.0.2, which fixes the issue.