CVE-2024-8027: Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything
A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS attacks during user chats. This vulnerability affects all versions prior to the fix.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8027?
CVE-2024-8027 is classified as a stored Cross-Site Scripting (XSS) vulnerability with a high severity due to its potential impact on user security.
How do I fix CVE-2024-8027?
To fix CVE-2024-8027, update to the latest version of netease-youdao/QAnything where the vulnerability has been addressed.
What are the potential impacts of CVE-2024-8027?
The potential impacts of CVE-2024-8027 include unauthorized script execution during user chats, which can lead to data theft or account compromise.
Who is affected by CVE-2024-8027?
All users of netease-youdao/QAnything prior to the fix are affected by CVE-2024-8027.
Can CVE-2024-8027 be exploited remotely?
Yes, CVE-2024-8027 can be exploited remotely by attackers uploading malicious knowledge files to the knowledge base.