Beveiligingsadvies

CVE-2024-8027

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:10:30

Laatst bijgewerkt 2025-03-20 18:20:41

Toegewezen door @huntr_ai

CVSS-score 6.1

Status PUBLISHED

Beschrijving

A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS attacks during user chats. This vulnerability affects all versions prior to the fix.

← Alle CVE's bekijken Bekijk op cve.org ↗