CVE-2024-29217

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.This issue affects Apache Answer: before 1.3.0. XSS attack when user changes personal website. A logged-in user, when modifying their personal website, can input malicious code in the website to create such an attack. Users are recommended to upgrade to version [1.3.0], which fixes the issue.

• CWE-79

• http://www.openwall.com/lists/oss-security/2024/04/19/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/nc0g1borr0d3wx25jm39pn7nyf268n0xMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/04/19/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/nc0g1borr0d3wx25jm39pn7nyf268n0xMailing List, Vendor Advisory

Published

Apr 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29211A race condition in Ivanti Secure Access Client before versi…4.7
• CVE-2024-29212Due to an unsafe de-serialization method used by the Veeam …9.9
• CVE-2024-29213Ivanti DSM < version 2024.2 allows authenticated users on th…7.8
• CVE-2024-29214Improper input validation in UEFI firmware CseVariableStorag…8.7
• CVE-2024-29215Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1, 9.6.x <=…4.3
• CVE-2024-29216Exposed IOCTL with insufficient access control issue exists …6.1
• CVE-2024-29218Out-of-bounds write vulnerability exists in KV STUDIO Ver.11…8.8
• CVE-2024-29219Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.…7.8
• CVE-2024-2922The Themesflat Addons For Elementor plugin for WordPress is …5.4
• CVE-2024-29220Ninja Forms prior to 3.8.1 contains a cross-site scripting v…6.1
• CVE-2024-29221Improper Access Control in Mattermost Server versions 9.5.x …3.8
• CVE-2024-29222Out-of-bounds write for some Intel(R) Graphics Driver softwa…6.1