CVE-2023-46945

Published: Apr 08, 2026 Last Modified: Apr 14, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,1
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none

Description

AI Translation Available

QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0003
Percentile
0,1th
Updated

EPSS Score Trend (Last 8 Days)

918

Server-Side Request Forgery (SSRF)

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control
Potential Impacts:
Read Application Data Execute Unauthorized Code Or Commands Bypass Protection Mechanism
Applicable Platforms
Technologies: AI/ML, Web Based, Web Server
View CWE Details
Application

Qd by Qd-Today

Product Information
Vendor Qd-Today
Product Qd
Version Range Affected
From 20220208 (inclusive)
To 20230821 (inclusive)
cpe:2.3:a:qd-today:qd:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://gist.github.com/kurokoleung/5b36b2013a54adadcce7996…
https://gist.github.com/kurokoleung/5b36b2013a54adadcce79967d3e4f056
https://qd-today.github.io/qd/
https://qd-today.github.io/qd/