GitHub Advisoryadvisory · Go

GHSA-f899-4mr4-fqpv Apache Answer Race Condition vulnerability

LOW Published 2024-01-10 Modified 2024-01-19 Official page ↗
Aliases
CVE-2023-49619
Ecosystem
Go
Packages
github.com/apache/incubator-answer
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-362
Reviewed
2024-01-10

Affected packages

• Go github.com/apache/incubator-answer: < 1.2.1 → fixed in 1.2.1

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2023-49619 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References