Feed/CVE-2026-33582
CVE-2026-33582MEDIUMCVSS 6.5

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Published Jun 9, 2026·Updated Jul 31, 2026

NVD Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

Affected Packages (1)

github.com/apache/incubator-answerGO
Fixed in 1.7.2-0.20260325113131-cfc3e54f30cc

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free