How severe is CVE-2024-41890?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.3 out of 10.

What type of vulnerability is CVE-2024-41890?

This is classified as CWE-772, which is a common weakness in software security.

CVE-2024-41890 - MEDIUM Severity | CVSS 5.3

Vulnerability Description

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. User sends multiple password reset emails, each containing a valid link. Within the link's validity period, this could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.

Related Vulnerabilities

CVE-2017-15332

MEDIUM

CVSS:5.3(Medium)

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, ...

CWE-7722017

CVE-2017-17164

MEDIUM

CVSS:5.3(Medium)

Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, ...

CWE-7722017

CVE-2017-17296

MEDIUM

CVSS:5.3(Medium)

CWE-7722017

CVE-2017-1786

MEDIUM

CVSS:5.3(Medium)

IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memory leak resulting in service loss. IBM X-...

CWE-7722017

CVE-2017-6599

MEDIUM

CVSS:5.3(Medium)

A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to ...

CWE-7722017

CVE-2018-10205

MEDIUM

CVSS:5.3(Medium)

hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Docker.

CWE-7722018