PT-2026-47716 · Apache · Apache Answer

Reimar Fritz · Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-34031

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1

Description The server fails to sufficiently validate user-supplied image URLs. This allows arbitrary external content to be embedded as profile images, potentially exposing users to unintended external requests and tracking by third-party servers.

Recommendations Upgrade to version 2.0.1.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-34031

Affected Products

Apache Answer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-34031 · Security Note
• https://lists.apache.org/thread/rwtxy39t54to9kv3dqtbjsbdpyk4jkd2 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2064343461570957653 · Twitter Post
• https://twitter.com/CVEnew/status/2064342551998456119 · Twitter Post
• http://openwall.com/lists/oss-security/2026/06/09/4 · Note