CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
38.6%
github.com/apache/incubator-answer is vulnerable to Missing Release of Resource after Effective Lifetime. The vulnerability is due to improper handling of password reset links. An attacker can misuse or hijack the link by accessing it within its validity period, even after a new link has been issued.