Qanything vulnerabilities
We track 1 vulnerability in Qanything products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Qanything vulnerabilities
- 8.1 High severity
netease-youdao/qanything: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability exists in the backend API of netease-youdao/qanything, as of commit d9ab8bc. The backend server has overly permissive CORS headers, allowing all cross-origin calls. This vulnerability affects all backend endpoi