CVE-2025-29868: Apache Answer: Using externally referenced images can leak user privacy.
Private Data Structure Returned From A Public Method vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.2.
If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user. Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29868?
CVE-2025-29868 is classified as a medium severity vulnerability.
How do I fix CVE-2025-29868?
To fix CVE-2025-29868, upgrade Apache Answer to version 1.4.3 or later.
What type of vulnerability is CVE-2025-29868?
CVE-2025-29868 is a private data structure exposure vulnerability.
Which versions of Apache Answer are affected by CVE-2025-29868?
CVE-2025-29868 affects Apache Answer versions up to 1.4.2.
What could be the impact of CVE-2025-29868?
The impact of CVE-2025-29868 could allow external providers to access private user data.