As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover
A verification code issued for one email-based workflow in Apache Answer through version 2.0.2 could be accepted by another sensitive workflow due to improper code purpose enforcement. The vulnerability carries moderate severity and affects account security. Apache Answer 2.0.3 patches the issue.
Why it matters: Organizations running Apache Answer through 2.0.2 should upgrade immediately to prevent attackers from using verification codes across workflows to compromise accounts.
- Source published
- First seen by Cybersecurity Tracker