← All advisories

Critical severity9.8NVD Advisory· Published Feb 11, 2024· Updated Jun 17, 2026

CVE-2024-25722

CVE-2024-25722

Description

qanything_kernel/connector/database/mysql/mysql_client.py in qanything.ai QAnything before 1.2.0 allows SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Qanything/Qanything
cpe:2.3:a:qanything:qanything:*:*:*:*:*:*:*:*
Range: <1.2.0
Qanything.ai/QAnythingllm-create2 versions
<1.2.0+ 1 more
- (no CPE)range: <1.2.0
- (no CPE)
Netease Youdao/QAnythingllm-create
Range: <1.2.0

Patches

Vulnerability mechanics

References

2

github.com/netease-youdao/QAnything/commit/35753b892c2c4361b318d68dfa3e251c85ce889cnvdPatch
github.com/netease-youdao/QAnything/compare/v1.1.1...v1.2.0nvdIssue Tracking

News mentions

0

No linked articles in our index yet.