CVE-2023-49619— Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-49619
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.
Source: NVD (National Vulnerability Database)
Vulnerability Description
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Answer 竞争条件问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Answer是美国阿帕奇（Apache）基金会的一个社区平台。 Apache Answer 1.2.0版本及之前版本存在竞争条件问题漏洞，该漏洞源于通过脚本重复提交可以使问题的收集数量增加很多倍。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Answer | 0 ~ 1.2.0 | - |
II. Public POCs for CVE-2023-49619
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-49619
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Apache Answer
- CVE-2026-24735
Apache Answer: Revision API Improper Access Control leads to - CVE-2025-29868
Apache Answer: Using externally referenced images can leak u - CVE-2024-45719
Apache Answer: Predictable Authorization Token Using UUIDv1 - CVE-2024-40761
Apache Answer: Avatar URL leaked user email addresses - CVE-2024-41888
Apache Answer: The link for resetting user password is not S
Same vendor: Apache Software Foundation
- CVE-2026-39816
Apache NiFi: Missing Execute Code Required Permission on Tin - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro - CVE-2026-25077
Apache CloudStack: Unauthenticated Command Injection in Dire - CVE-2025-69233
Apache CloudStack: Domain/account resources limits not honor - CVE-2025-66467
Apache CloudStack: MinIO policy remains intact on bucket del
V. Comments for CVE-2023-49619
No comments yet