Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-29868

Good to know:

icon

Date: April 1, 2025

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user. Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.

Severity Score

Related Resources (10)

https://lists.apache.org/thread/l7pohw5g03g3qsvrz8pqc9t29mdv5lhf
http://www.openwall.com/lists/oss-security/2025/04/10/3
https://nvd.nist.gov/vuln/detail/CVE-2025-29868
http://www.openwall.com/lists/oss-security/2025/04/01/2
http://www.openwall.com/lists/oss-security/2025/04/02/1
https://github.com/advisories/GHSA-wqcc-mfhw-53pc
https://seclists.org/oss-sec/2025/q1/261
https://github.com/apache/answer/issues/1250
https://github.com/apache/answer
https://www.mend.io/vulnerability-database/CVE-2025-29868

Severity Score

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

Private Data Structure Returned From A Public Method

CWE-495

Top Fix

icon

Upgrade Version

Upgrade to version github.com/apache/answer - v1.4.5;https://github.com/apache/answer.git - v1.4.5

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us