CVE-2025-29868
published 2025-04-01CVE-2025-29868: Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an…
PriorityP335medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.87%
54.6th percentile
Private Data Structure Returned From A Public Method vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.2.
If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.
Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | answer | <= 1.4.2 | — |
| apache_software_foundation | apache_answer | <= 1.4.2 | — |
| github.com | apache_answer | >= 0 < 1.4.5 | 1.4.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Apache Answer User Using External Images Potentially Discloses User Information in github.com/apache/answer
osv·2025-04-02
CVE-2025-29868 Apache Answer User Using External Images Potentially Discloses User Information in github.com/apache/answer
Apache Answer User Using External Images Potentially Discloses User Information in github.com/apache/answer
Apache Answer User Using External Images Potentially Discloses User Information in github.com/apache/answer
OSV
Apache Answer User Using External Images Potentially Discloses User Information
osv·2025-04-01
CVE-2025-29868 [LOW] Apache Answer User Using External Images Potentially Discloses User Information
Apache Answer User Using External Images Potentially Discloses User Information
Private Data Structure Returned From A Public Method vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.2.
If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.
Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.
GHSA
Apache Answer User Using External Images Potentially Discloses User Information
ghsa·2025-04-01
CVE-2025-29868 [LOW] CWE-495 Apache Answer User Using External Images Potentially Discloses User Information
Apache Answer User Using External Images Potentially Discloses User Information
Private Data Structure Returned From A Public Method vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.2.
If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.
Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-04-01
Published