CVE-2024-8027
Published Mar 20, 2025A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS a…
Vendor archive
youdao CVEs
Beta · best-effort5 CVEs tagged to vendor youdao — 1 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2024-8024
Published Mar 20, 2025A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading…
CVE-2024-12866
Published Mar 20, 2025A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can…
CVE-2024-12864
Published Mar 20, 2025A Denial of Service (DoS) vulnerability was discovered in the file upload feature of netease-youdao/qanything version v2.0.0. The vulnerability is due to improper handling of form…
CVE-2024-10264
Published Mar 20, 2025HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistencies in the interpretation of HTTP requests between a proxy a…
Showing 1-5 of 5 CVEsPage 1 of 1