~ / search / GHSA-rmqp-mvv2-54c6

GHSA-rmqp-mvv2-54c6

Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-22393

Packages

EcosystemPackageAffectedFixed in
Go github.com/apache/incubator-answer < 1.2.5 1.2.5

Details

As written in the advisory (Markdown source, shown as plain text).

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content. Users are recommended to upgrade to version 1.2.5, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.