CVE-2024-22393

Name of the Vulnerable Software and Affected Versions Apache Answer versions through 1.2.1

Description The issue affects Apache Answer, allowing a logged-in user to cause a Pixel Flood Attack by uploading large pixel files, which can cause the server to run out of memory. This can be done by uploading an image when posting content.

Recommendations For Apache Answer versions through 1.2.1, upgrade to version 1.2.5, which fixes the issue. As a temporary workaround, consider restricting image uploads for logged-in users until the patch is applied.