netease-youdao/qanything
- Software type
- Other
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/22/2026, netease-youdao/qanything recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of netease-youdao/qanything and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-12866Local File Inclusion in netease-youdao/qanythingCVE-2024-8026CSRF due to overly permissive CORS headers in netease-youdao/qanythingCVE-2024-12864Unauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanythingCVE-2024-8027Stored Cross-Site Scripting (XSS) in netease-youdao/QAnythingCVE-2024-8024CORS Misconfiguration in netease-youdao/qanything| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2024-12866Local File Inclusion in netease-youdao/qanything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityHigh |
CVE-2024-8026CSRF due to overly permissive CORS headers in netease-youdao/qanything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityHigh |
CVE-2024-12864Unauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityHigh |
CVE-2024-8027Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityMedium |
CVE-2024-8024CORS Misconfiguration in netease-youdao/qanything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityHigh |
CVE-2024-10264HTTP Request Smuggling in netease-youdao/qanything | Exploitation statusActively exploited | FixNo | Published03/20/2025 | SeverityHigh |
CVE-2024-7099SQL Injection in netease-youdao/qanything | Exploitation statusActively exploited | FixYes | Published10/13/2024 | SeverityCritical |
7 Results | Page 1 of 1