Apache Answer failed to enforce access restrictions on direct API endpoints, enabling authenticated users to discover and retrieve unlisted questions, including their answers, comments, and revision history. The vulnerability allows an attacker to gain sensitive information that should remain hidden, compromising confidentiality of user‑generated content.

Apache Software Foundation’s Apache Answer, version 2.0.0 and earlier. The issue is present in all builds released up to and including 2.0.0.

The flaw can be exploited by any user authenticated to the API; no additional privileges are required beyond standard authentication. Since the API endpoints are publicly reachable, an attacker can enumerate question IDs and retrieve data. The CVSS score of 6.5 indicates moderate severity, and the EPSS score of less than 1% suggests a low likelihood of automated exploitation. The vulnerability is not listed in the CISA KEV catalog, but the potential impact remains significant data disclosure, allowing a determined attacker to harvest large amounts of sensitive content.