{"items":[{"id":"CVE-2023-4815","published":"2023-09-07T06:26:09.174Z","updated":"2024-09-26T19:25:34.623Z","title":"Missing Authentication for Critical Function in answerdev/answer","severity":"HIGH","score":8.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00823,"kevAdded":null},{"id":"CVE-2023-4127","published":"2023-08-03T03:20:57.777Z","updated":"2024-10-10T20:15:44.062Z","title":"Race Condition within a Thread in answerdev/answer","severity":"MEDIUM","score":6.5,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00485,"kevAdded":null},{"id":"CVE-2023-4126","published":"2023-08-03T03:08:57.887Z","updated":"2024-10-10T20:16:50.358Z","title":"Insufficient Session Expiration in answerdev/answer","severity":"MEDIUM","score":4.1,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00569,"kevAdded":null},{"id":"CVE-2023-4125","published":"2023-08-03T03:06:49.367Z","updated":"2024-10-10T20:21:47.494Z","title":"Weak Password Requirements in answerdev/answer","severity":"HIGH","score":8.8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00883,"kevAdded":null},{"id":"CVE-2023-4124","published":"2023-08-03T03:05:32.060Z","updated":"2024-10-10T20:22:32.785Z","title":"Missing Authorization in answerdev/answer","severity":"HIGH","score":8.1,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0065,"kevAdded":null},{"id":"CVE-2023-2590","published":"2023-05-09T00:00:00.000Z","updated":"2025-01-28T19:50:54.401Z","title":"Missing Authorization in answerdev/answer","severity":"HIGH","score":7.7,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2023-1976","published":"2023-04-11T00:00:00.000Z","updated":"2025-02-07T17:13:55.067Z","title":"Password Aging with Long Expiration in answerdev/answer","severity":"MEDIUM","score":4.6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2023-1975","published":"2023-04-11T00:00:00.000Z","updated":"2025-02-07T17:14:37.065Z","title":"Insertion of Sensitive Information Into Sent Data in answerdev/answer","severity":"HIGH","score":7.6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00586,"kevAdded":null},{"id":"CVE-2023-1974","published":"2023-04-11T00:00:00.000Z","updated":"2025-02-07T17:14:55.779Z","title":"Exposure of Sensitive Information Through Metadata in answerdev/answer","severity":"HIGH","score":7.7,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00597,"kevAdded":null},{"id":"CVE-2023-1543","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-26T18:33:45.462Z","title":"Insufficient Session Expiration in answerdev/answer","severity":"MEDIUM","score":6.8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00775,"kevAdded":null},{"id":"CVE-2023-1542","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-26T18:34:58.666Z","title":"Business Logic Errors in answerdev/answer","severity":"HIGH","score":8.1,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2023-1541","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-27T17:03:49.959Z","title":"Business Logic Errors in answerdev/answer","severity":"MEDIUM","score":6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00644,"kevAdded":null},{"id":"CVE-2023-1540","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-25T20:24:35.893Z","title":"Observable Response Discrepancy in answerdev/answer","severity":"MEDIUM","score":5.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2023-1539","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-27T17:02:43.046Z","title":"Improper Restriction of Excessive Authentication Attempts in answerdev/answer","severity":"MEDIUM","score":5.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00614,"kevAdded":null},{"id":"CVE-2023-1538","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-27T16:55:54.306Z","title":"Observable Timing Discrepancy in answerdev/answer","severity":"MEDIUM","score":5.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2023-1537","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-27T16:51:11.306Z","title":"Authentication Bypass by Capture-replay in answerdev/answer","severity":"MEDIUM","score":5.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00837,"kevAdded":null},{"id":"CVE-2023-1536","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-27T16:47:35.124Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":7.6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2023-1535","published":"2023-03-21T00:00:00.000Z","updated":"2025-02-25T21:14:42.121Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00536,"kevAdded":null},{"id":"CVE-2023-1245","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:40:01.895Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"LOW","score":3.5,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2023-1244","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:41:31.634Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"CRITICAL","score":9.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2023-1243","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:44:32.440Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"MEDIUM","score":6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2023-1242","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-05T19:29:06.967Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2023-1241","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T17:04:08.685Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8.8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2023-1240","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-04T19:11:12.968Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2023-1239","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:46:24.066Z","title":"Cross-site Scripting (XSS) - Reflected in answerdev/answer","severity":"MEDIUM","score":6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2023-1238","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:49:16.974Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":7.6,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00553,"kevAdded":null},{"id":"CVE-2023-1237","published":"2023-03-07T00:00:00.000Z","updated":"2025-03-06T14:51:17.663Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"LOW","score":3.4,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2023-0934","published":"2023-02-21T00:00:00.000Z","updated":"2025-03-12T18:07:31.380Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"MEDIUM","score":6.3,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2023-0744","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T14:49:06.360Z","title":"Improper Access Control in answerdev/answer","severity":"CRITICAL","score":9.8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.06368,"kevAdded":null},{"id":"CVE-2023-0743","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T14:52:51.889Z","title":"Cross-site Scripting (XSS) - Generic in answerdev/answer","severity":"HIGH","score":8.2,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2023-0742","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T15:02:35.413Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00871,"kevAdded":null},{"id":"CVE-2023-0741","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T15:10:05.475Z","title":"Cross-site Scripting (XSS) - DOM in answerdev/answer","severity":"HIGH","score":8,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00871,"kevAdded":null},{"id":"CVE-2023-0740","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T15:17:26.746Z","title":"Cross-site Scripting (XSS) - Stored in answerdev/answer","severity":"HIGH","score":8.2,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2023-0739","published":"2023-02-08T00:00:00.000Z","updated":"2025-03-25T15:48:08.227Z","title":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer","severity":"HIGH","score":8.1,"vendor":"answerdev","product":"answerdev/answer","kev":false,"epss":0.0069,"kevAdded":null}]}