Vendors / netease-youdao Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now netease-youdao records in CISA KEV No netease-youdao vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistencies in the interpretation of HTTP requests between a proxy and a server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00955 · Published 2025-03-20 · No fix listed CWE-444
Priority HIGH 74
A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01518 · Published 2025-03-20 · No fix listed CWE-22
Priority HIGH 72
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of netease-youdao/qanything version v2.0.0.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00878 · Published 2025-03-20 · No fix listed CWE-400
Priority HIGH 72
A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00317 · Published 2025-03-20 · No fix listed CWE-346
Priority MEDIUM 60
A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00356 · Published 2025-03-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 5 5 0 0
THREATIST.IORead the docs