{
  "from_raw": "Enxin Xie <linkinstar@apache.org>",
  "from": "Enxin Xie <li...@apache.org>",
  "gravatar": "e817dfc7223a5b6ab7ceaa4c3a08eb2a",
  "to": "an...@apache.org,\n de...@answer.apache.org",
  "subject": "CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles",
  "message-id": "<8cd76435-138a-cae5-cee6-add217a37736@apache.org>",
  "mid": "b9whow167cr0lkhqk6xzk0c2bb86srhy",
  "permalinks": [
    "b9whow167cr0lkhqk6xzk0c2bb86srhy",
    "r151eefa779a16e8064c88d1fd86272bca8468efda23f1a0f2c7ae99a@<dev.answer.apache.org>"
  ],
  "dbid": "c27df2d588920e7ef550a7ad8e081506105e1e8d8efef9ee322ce39fd7df8155",
  "cc": "",
  "epoch": 1792121721,
  "list": "<dev.answer.apache.org>",
  "list_raw": "<dev.answer.apache.org>",
  "date": "2026/10/16 03:35:21",
  "private": false,
  "references": "",
  "in-reply-to": "",
  "body": "Severity: moderate \n\nAffected versions:\n\n- Apache Answer through 2.0.2\n\nDescription:\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nUnauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles.\n\n\nUsers are recommended to upgrade to version 2.0.3, which fixes the issue.\n\nCredit:\n\nsec-reex (reporter)\n\nReferences:\n\nhttps://answer.apache.org\nhttps://www.cve.org/CVERecord?id=CVE-2026-76994\n\n\n---------------------------------------------------------------------\nTo unsubscribe, e-mail: dev-unsubscribe@answer.apache.org\nFor additional commands, e-mail: dev-help@answer.apache.org\n\n",
  "body_short": "Severity: moderate \n\nAffected versions:\n\n- Apache Answer through 2.0.2\n\nDescription:\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\n\n\nThis issue affects Ap",
  "html_source_only": false,
  "attachments": [],
  "forum": "dev@answer.apache.org",
  "size": 3904,
  "id": "b9whow167cr0lkhqk6xzk0c2bb86srhy"
}