Mintplex-labs vulnerabilities
77 CVEs and advisories name Mintplex-labs as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-0550Privileged User using traversal to read system files
- CVE-2024-0763Improper validation of document removal parameter
- CVE-2024-0551Download and export of file via default user role
- CVE-2024-0759Collection of internally resolving IPs
- CVE-2024-0439User can manually send request at manager permission to modify system configurations
- CVE-2024-0440SSRF - file:// unsanitized access to underlying host files
- CVE-2024-0435User can submit message to self-XSS
- CVE-2024-0798Privilege Escalation in mintplex-labs/anything-llm
- CVE-2024-0436Prevent timing attack for single-user password check
- CVE-2024-0455SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2024-0879Authentication bypass in vector-admin domain restriction
- CVE-2024-22422Unauthenticated Denial of Service (DOS) attack in AnythingLLM
- CVE-2023-5833Improper Access Control in mintplex-labs/anything-llm
- CVE-2023-5832Improper Input Validation in mintplex-labs/anything-llm
- CVE-2023-4899SQL Injection in mintplex-labs/anything-llm
- CVE-2023-4898Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm
- CVE-2023-4897Relative Path Traversal in mintplex-labs/anything-llm