Improper Access Control in answerdev/answer
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 6.4%
from disclosure to weapon56 days
Published on NVDFeb 8
1st PoC+56d
exploitation probability
6.4%top 7% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
answerdev · answerdev/answerpublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/51257cve_referencepacketstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.