Threats tagged 'ghsa-mpww-xrm4-2j4x'

Apache Answer versions through 2.0.2 suffer from an insufficient session expiration vulnerability that allows revoked users to continue accessing private uploaded files using stale visit tokens. This issue is resolved in version 2.0.3.