CVE-2024-12866
Local File Inclusion in netease-youdao/qanything
概要
Local File Inclusion in netease-youdao/qanything
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration files.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web huntr.com