Denial of Service Vulnerability in Netease Youdao Qanything

CVE-2024-12864

What is CVE-2024-12864?

A vulnerability in the file upload feature of Netease Youdao Qanything version v2.0.0 allows attackers to exploit improper handling of form-data with excessively long filenames. This can lead to a Denial of Service condition, where the server struggles to process legitimate requests as it becomes overwhelmed. The nature of this vulnerability eliminates the need for authentication, making it particularly dangerous as it can be easily exploited by malicious actors to disrupt service for all users.

References