CVE Daily

CVE-2024-8024

A CORS misconfiguration vulnerability exists in netease-youdao/qanything version...

High CVSS 7.5

Overview

A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such security issues.

CWE: CWE-346 Published: 2025-03-20T10:15:39.380
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: info_leak, misconfiguration (tag impact: LOW)

Recommended actions:

  • Reduce verbose errors, remove debug endpoints, minimize PII in logs.

Recommended tools

Tags