CVE-2025-29868
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 15, 2025
CWE ID 495
Summary
CVE-2025-29868 is a vulnerability affecting Apache Answer versions up to 1.4.2. This issue involves a Private Data Structure Returned From A Public Method, allowing external image providers to obtain the private IP address of users accessing their images. To mitigate this risk, it is recommended that users upgrade to Apache Answer version 1.4.5, which includes a fix for this issue. Administrators can also set new display options to restrict external content in the newer version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Apache