QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Qd-today
  • Qd

No data.

No data.

References
Link Providers
https://gist.github.com/kurokoleung/5b36b2013a54adadcce79967d3e4f056 cve-icon cve-icon
https://qd-today.github.io/qd/ cve-icon cve-icon
History

Thu, 09 Apr 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Thu, 09 Apr 2026 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Qd-today
Qd-today qd
Vendors & Products Qd-today
Qd-today qd

Wed, 08 Apr 2026 20:15:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery in QD 20230821
Weaknesses CWE-918

Wed, 08 Apr 2026 17:00:00 +0000

Type Values Removed Values Added
Description QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-04-08T00:00:00.000Z

Updated: 2026-04-09T20:47:17.674Z

Reserved: 2023-10-30T00:00:00.000Z

Link: CVE-2023-46945

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-04-08T17:17:01.010

Modified: 2026-04-09T21:16:04.387

Link: CVE-2023-46945

cve-icon Redhat

No data.