Skip to contentMintplexlabs Anythingllm vulnerabilities
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreStored XSS leading to Admin Account Takeover in mintplex-labs/anything-llmCVE-2024-35700.0 None
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation via Improper Input Validation in mintplex-labs/anything-llmCVE-2024-31016.7 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation via Mass Assignment in mintplex-labs/anything-llmCVE-2024-32837.2 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDenial of Service (DoS) Vulnerability in mintplex-labs/anything-llmCVE-2024-35697.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplex-labs\/anything-llm, mintplexlabs anythingllm +2 morePath Traversal in mintplex-labs/anything-llmCVE-2024-30259.9 Critical
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm +1 moreDefault user role exporting save state of instanceCVE-2024-07659.6 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreCreate user API role not enforcedCVE-2024-07957.2 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivileged User using traversal to read system filesCVE-2024-05509.6 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper validation of document removal parameterCVE-2024-07638.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDownload and export of file via default user roleCVE-2024-05517.1 High
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm +1 moreCollection of internally resolving IPsCVE-2024-07597.7 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUser can manually send request at manager permission to modify system configurationsCVE-2024-04397.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreSSRF - file:// unsanitized access to underlying host filesCVE-2024-04409.6 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUser can submit message to self-XSSCVE-2024-04358.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation in mintplex-labs/anything-llmCVE-2024-07988.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrevent timing attack for single-user password checkCVE-2024-04367.1 High
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm, mintplex-labs\/anything-llm +2 moreSSRF on AWS deployed instances of AnythingLLM via /metadataCVE-2024-04559.9 Critical
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreUnauthenticated Denial of Service (DOS) attack in AnythingLLMCVE-2024-224227.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Access Control in mintplex-labs/anything-llmCVE-2023-58338.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Input Validation in mintplex-labs/anything-llmCVE-2023-58329.1 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreRelative Path Traversal in mintplex-labs/anything-llmCVE-2023-48978.7 High