PT-2026-47713

CVE-2026-25699

Published

2026-06-09

Updated

2026-09-04

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1

Description Timeline-related APIs lack proper authorization checks, which allows authenticated users to access content that is private, deleted, or unapproved, as well as its associated revision history. This leads to the exposure of private personal information to unauthorized actors.

Recommendations Upgrade to version 2.0.1.

Exploitability

Exploit

Fix

Researchers

Sho Odagiri

Vendors

Affected products

Weakness enumeration

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

Related identifiers

CVE-2026-25699