Back to feed
EUVD-2024-0720 · Published Feb 22, 2024
Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content. Users are recommended to upgrade to version 1.2.5, which fixes the issue.
Technologies
Apache AnswerApache Incubator-Answer
Weaknesses
CWE-434
CVSS scores
- v3.16.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Stealth
References
Potentially impacted assets
See if this affects your attack surface
