CVE-2026-79620

EUVD-2026-104161
Exposure of sensitive information through data queries vulnerability in Apache Answer.



This issue affects Apache Answer: through 2.0.2.



An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions.



Users are recommended to upgrade to version 2.0.3, which fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 9.88%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
apacheanswer
𝑥
≤ 2.0.2
CNA