CVE-2024-10264

Description

HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistencies in the interpretation of HTTP requests between a proxy and a server. This can lead to unauthorized access, bypassing security controls, session hijacking, data leakage, and potentially arbitrary code execution.

Reserved 2024-10-22 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_ai

Problem types

CWE-444 Inconsistent Interpretation of HTTP Requests

Product status

Any version
affected

References

huntr.com/bounties/988247d5-fd60-4d85-845a-e867d62c0d02

cve.org (CVE-2024-10264)

nvd.nist.gov (CVE-2024-10264)

Download JSON