CVE-2023-46945

CVE-2023-46945 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting QD 20230821 that allows attackers to craft malicious requests to interact with internal systems and resources. The vulnerability carries a CVSS severity score of 9.1 (Critical) with a network-based attack vector requiring no authentication or user interaction, indicating high exploitability with minimal barriers to attack. The vulnerability poses significant risks to confidentiality and integrity of affected systems, though availability is not directly impacted. As of the current assessment, this vulnerability is not appearing on active exploitation lists, with the KEV catalog showing no active exploitation activity and no notable community attention reflected in the Hot List status. The EPSS score of 0.000380 indicates relatively low real-world exploitation probability compared to other disclosed vulnerabilities, suggesting the threat remains theoretical rather than actively weaponized at scale.