You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@answer.apache.org by li...@apache.org on 2024/01/11 03:00:16 UTC
(incubator-answer-website) branch docs/security created (now 9e4196a5)
This is an automated email from the ASF dual-hosted git repository.
linkinstar pushed a change to branch docs/security
in repository https://gitbox.apache.org/repos/asf/incubator-answer-website.git
at 9e4196a5 docs(security): add security document
This branch includes the following new commits:
new 9e4196a5 docs(security): add security document
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(incubator-answer-website) 01/01: docs(security): add security document
Posted by li...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
linkinstar pushed a commit to branch docs/security
in repository https://gitbox.apache.org/repos/asf/incubator-answer-website.git
commit 9e4196a5500a70a0689f0b3e4a16bf1ba610370d
Author: LinkinStars <li...@foxmail.com>
AuthorDate: Thu Jan 11 11:00:02 2024 +0800
docs(security): add security document
---
community/security.md | 17 +++++++++++++++++
sidebarsCommunity.js | 1 +
2 files changed, 18 insertions(+)
diff --git a/community/security.md b/community/security.md
new file mode 100644
index 00000000..2eda3d10
--- /dev/null
+++ b/community/security.md
@@ -0,0 +1,17 @@
+---
+slug: /security
+---
+
+# Security
+
+The Apache Software Foundation takes a rigorous stance on eliminating security issues in its software projects. If you find a security bug, with that in mind, please do not file public issues. You can follow the instructions in the [security policy](https://github.com/apache/incubator-answer/security/policy) to report it privately. We will fix it as soon as possible.
+
+# Security fixes
+
+## v1.2.0
+
+### CVE-2023-49619
+
+Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times.
+
+https://www.cve.org/CVERecord?id=CVE-2023-49619
\ No newline at end of file
diff --git a/sidebarsCommunity.js b/sidebarsCommunity.js
index 1cdac308..d84015d1 100644
--- a/sidebarsCommunity.js
+++ b/sidebarsCommunity.js
@@ -2,6 +2,7 @@ module.exports = {
community: [
'support',
'about',
+ 'security',
{
type: 'category',
label: 'Contributing',