Netease Youdao Qanything HTTP Request Smuggling Vulnerability

A HTTP request smuggling vulnerability has been identified in Netease Youdao Qanything version 1.4.1. This vulnerability allows attackers to exploit differences in how HTTP requests are interpreted by a proxy and a server. The exploitation can lead to unauthorized access, bypassing of security controls, session hijacking, data leakage, and potentially arbitrary code execution.

Impact

Exploitation of this vulnerability could result in unauthorized access, session hijacking, data leakage, and possibly arbitrary code execution.