CVE-2023-49619

CWE-362 — Race Condition5 documents4 sources
Severity
3.1LOW
EPSS
1.3%
top 20.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Github.com Apache/incubator-answerApache AnswerApache Software Foundation Apache Answer
Timeline
PublishedJan 10
Latest updateJun 28

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the issue.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 1.6 | Impact: 1.4

Affected Packages3 packages

▶NVDapache/answer< 1.2.1

🔴Vulnerability Details

4
OSV
Apache Answer Race Condition vulnerability in github.com/apache/incubator-answer↗2024-06-28
▶
OSV
Apache Answer Race Condition vulnerability↗2024-01-10
▶
CVEList
Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.↗2024-01-10
▶
GHSA
Apache Answer Race Condition vulnerability↗2024-01-10
▶
CVE-2023-49619 (LOW CVSS 3.1) | Concurrent Execution using Shared R | cvebase.io