NetSight
low3.5

CVE-2023-2590

Answer Missing Authorization vulnerability

Impact

A missing authorization in GitHub repository answerdev/answer prior to 1.0.9 can lead to a user rating their own answer as the best answer.

Affected packages

EcosystemPackageAffectedFixed in
gogithub.com/answerdev/answer< 1.0.91.0.9

Affected products

VendorProductAffected versions
AnswerAnswer
before 1.0.9

Weakness classification

References