GitHub Advisoryadvisory · Go

GHSA-qmqw-r4x6-3w2q Answer Missing Authorization vulnerability

LOW Published 2023-05-09 Modified 2023-05-12 Official page ↗

Aliases: CVE-2023-2590
Ecosystem: Go
Packages: github.com/answerdev/answer
Severity: Low
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses: CWE-862
Reviewed: 2023-05-11

Affected packages

• Go github.com/answerdev/answer: < 1.0.9 → fixed in 1.0.9

Description

A missing authorization in GitHub repository answerdev/answer prior to 1.0.9 can lead to a user rating their own answer as the best answer.

Related

Alias · CVE (1)

CVE-2023-2590 Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9. vulnerability

Weakness · CWE (1)

CWE-862 Missing Authorization weakness

References