Skip to contentNetease-youdao Qanything vulnerabilities
- netease-youdao qanythingQAnything 2.0.0 Unauthenticated Cross-User File DisclosureCVE-2026-856718.7 High
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreLocal File Inclusion in netease-youdao/qanythingCVE-2024-128667.5 High
- netease-youdao netease-youdao/qanything, qanything +1 moreCSRF due to overly permissive CORS headers in netease-youdao/qanythingCVE-2024-80268.1 High
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreUnauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanythingCVE-2024-128647.5 High
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreStored Cross-Site Scripting (XSS) in netease-youdao/QAnythingCVE-2024-80276.1 Medium
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreCORS Misconfiguration in netease-youdao/qanythingCVE-2024-80247.5 High
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreHTTP Request Smuggling in netease-youdao/qanythingCVE-2024-102647.5 High
- netease qanything, netease-youdao netease-youdao/qanything +1 moreSQL Injection in netease-youdao/qanythingCVE-2024-70999.8 Critical