Vulnerabilidades em netease-youdao
12 resultadosAnálise Vexday
NetEase Youdao apresenta um perfil de risco moderado com 7 vulnerabilidades catalogadas, nenhuma sob exploração ativa conhecida. A fraqueza dominante é path traversal (CWE-22), padrão de segurança básica, com apenas 1 vulnerabilidade crítica. O risco é estável: sem publicações recentes nos últimos 90 dias indica maturidade ou baixa atividade de descobertas.
CVE-2024-12866HIGHLocal File Inclusion in netease-youdao/qanythingEPSS 1.5%CVE-2024-10264HIGHHTTP Request Smuggling in netease-youdao/qanythingEPSS 1.0%CVE-2024-12864HIGHUnauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanythingEPSS 0.9%CVE-2026-85671HIGHQAnything 2.0.0 Unauthenticated Cross-User File DisclosureEPSS 0.6%CVE-2024-7099CRITICALSQL Injection in netease-youdao/qanythingEPSS 0.6%CVE-2026-90818MEDIUMnetease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgeryEPSS 0.5%CVE-2026-18995MEDIUMnetease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosureEPSS 0.5%CVE-2024-8027MEDIUMStored Cross-Site Scripting (XSS) in netease-youdao/QAnythingEPSS 0.4%CVE-2024-8024HIGHCORS Misconfiguration in netease-youdao/qanythingEPSS 0.3%CVE-2024-8026HIGHCSRF due to overly permissive CORS headers in netease-youdao/qanythingEPSS 0.2%CVE-2026-108156MEDIUMLobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.jsonEPSS 0.2%CVE-2026-112014MEDIUMLobsterAI before 2026.10.16 Hardcoded Password in Provider API Key ExportEPSS 0.1%