# cve.now: Answerdev

The newest entries naming Answerdev as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-4815](https://cve.now/CVE-2023-4815.md): Missing Authentication for Critical Function in answerdev/answer (CVSS 8.3)
- [CVE-2023-4127](https://cve.now/CVE-2023-4127.md): Race Condition within a Thread in answerdev/answer (CVSS 6.5)
- [CVE-2023-4126](https://cve.now/CVE-2023-4126.md): Insufficient Session Expiration in answerdev/answer (CVSS 4.1)
- [CVE-2023-4125](https://cve.now/CVE-2023-4125.md): Weak Password Requirements in answerdev/answer (CVSS 8.8)
- [CVE-2023-4124](https://cve.now/CVE-2023-4124.md): Missing Authorization in answerdev/answer (CVSS 8.1)
- [CVE-2023-2590](https://cve.now/CVE-2023-2590.md): Missing Authorization in answerdev/answer (CVSS 7.7)
- [CVE-2023-1976](https://cve.now/CVE-2023-1976.md): Password Aging with Long Expiration in answerdev/answer (CVSS 4.6)
- [CVE-2023-1975](https://cve.now/CVE-2023-1975.md): Insertion of Sensitive Information Into Sent Data in answerdev/answer (CVSS 7.6)
- [CVE-2023-1974](https://cve.now/CVE-2023-1974.md): Exposure of Sensitive Information Through Metadata in answerdev/answer (CVSS 7.7)
- [CVE-2023-1543](https://cve.now/CVE-2023-1543.md): Insufficient Session Expiration in answerdev/answer (CVSS 6.8)
- [CVE-2023-1542](https://cve.now/CVE-2023-1542.md): Business Logic Errors in answerdev/answer (CVSS 8.1)
- [CVE-2023-1541](https://cve.now/CVE-2023-1541.md): Business Logic Errors in answerdev/answer (CVSS 6.0)
- [CVE-2023-1540](https://cve.now/CVE-2023-1540.md): Observable Response Discrepancy in answerdev/answer (CVSS 5.3)
- [CVE-2023-1539](https://cve.now/CVE-2023-1539.md): Improper Restriction of Excessive Authentication Attempts in answerdev/answer (CVSS 5.3)
- [CVE-2023-1538](https://cve.now/CVE-2023-1538.md): Observable Timing Discrepancy in answerdev/answer (CVSS 5.3)
- [CVE-2023-1537](https://cve.now/CVE-2023-1537.md): Authentication Bypass by Capture-replay in answerdev/answer (CVSS 5.3)
- [CVE-2023-1536](https://cve.now/CVE-2023-1536.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 7.6)
- [CVE-2023-1535](https://cve.now/CVE-2023-1535.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.3)
- [CVE-2023-1245](https://cve.now/CVE-2023-1245.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 3.5)
- [CVE-2023-1244](https://cve.now/CVE-2023-1244.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 9.3)
- [CVE-2023-1243](https://cve.now/CVE-2023-1243.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 6.0)
- [CVE-2023-1242](https://cve.now/CVE-2023-1242.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.0)
- [CVE-2023-1241](https://cve.now/CVE-2023-1241.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.8)
- [CVE-2023-1240](https://cve.now/CVE-2023-1240.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.0)
- [CVE-2023-1239](https://cve.now/CVE-2023-1239.md): Cross-site Scripting (XSS) - Reflected in answerdev/answer (CVSS 6.0)
- [CVE-2023-1238](https://cve.now/CVE-2023-1238.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 7.6)
- [CVE-2023-1237](https://cve.now/CVE-2023-1237.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 3.4)
- [CVE-2023-0934](https://cve.now/CVE-2023-0934.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 6.3)
- [CVE-2023-0744](https://cve.now/CVE-2023-0744.md): Improper Access Control in answerdev/answer (CVSS 9.8)
- [CVE-2023-0743](https://cve.now/CVE-2023-0743.md): Cross-site Scripting (XSS) - Generic in answerdev/answer (CVSS 8.2)
- [CVE-2023-0742](https://cve.now/CVE-2023-0742.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.0)
- [CVE-2023-0741](https://cve.now/CVE-2023-0741.md): Cross-site Scripting (XSS) - DOM in answerdev/answer (CVSS 8.0)
- [CVE-2023-0740](https://cve.now/CVE-2023-0740.md): Cross-site Scripting (XSS) - Stored in answerdev/answer (CVSS 8.2)
- [CVE-2023-0739](https://cve.now/CVE-2023-0739.md): Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/answerdev
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.