Detections
Analytics
SCA: security update for github.com/apache/incubator-answer (GHSA-cvqr-mwh6-2vc6)
medium Tenable Self-Hosted Container Security Plugin ID 414114
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in
Apache Answer.This issue affects Apache Answer: before 1.3.0. XSS attack when user changes personal
website. A logged-in user, when modifying their personal website, can input malicious code in the website
to create such an attack. Users are recommended to upgrade to version [1.3.0], which fixes the issue.
(CVE-2024-29217)
See Also
Plugin Details
Severity: Medium
ID: 414114
Version: Revision 1.12
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.1
Percentile: 7.48
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS Score Source: CVE-2024-29217
CVSS v3
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 4
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/21/2024
Vulnerability Publication Date: 4/21/2024
Reference Information
CVE: CVE-2024-29217
cwe: CWE-79