Anythingllm
Source repositories
CVEs (75)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-0763 | Hig | 0.00 | 8.1 | 0.01 | Feb 27, 2024 | Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need access to the server at some privilege level since this endpoint is protected and requires authorization. | ||
| CVE-2024-0551 | Hig | 0.00 | 7.1 | 0.01 | Feb 27, 2024 | Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk… | ||
| CVE-2024-0759 | Hig | 0.00 | 7.5 | 0.01 | Feb 27, 2024 | Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM. This would require… | ||
| CVE-2024-0798 | Med | 0.00 | 6.5 | 0.01 | Feb 26, 2024 | A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite the intended restriction that prevents 'default' role users from deleting admin-uploaded documents, an attacker can… | ||
| CVE-2024-0455 | Hig | 0.00 | 7.5 | 0.01 | Feb 26, 2024 | The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL ``` http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance ```… | ||
| CVE-2024-0440 | Med | 0.00 | 6.5 | 0.01 | Feb 26, 2024 | Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files. | ||
| CVE-2024-0439 | Hig | 0.00 | 8.8 | 0.01 | Feb 26, 2024 | As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a… | ||
| CVE-2024-0436 | Med | 0.00 | 5.9 | 0.00 | Feb 26, 2024 | Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the `!==` used for comparison. The risk is minified by the additional overhead of the request,… | ||
| CVE-2024-0435 | Med | 0.00 | 5.4 | 0.00 | Feb 26, 2024 | User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads. Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in… | ||
| CVE-2024-22422 | Hig | 0.00 | 7.5 | 0.01 | Jan 19, 2024 | AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash the server… | ||
| CVE-2023-5833 | Hig | 0.00 | 8.8 | 0.01 | Oct 30, 2023 | Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. | ||
| CVE-2023-5832 | Cri | 0.00 | 9.1 | 0.01 | Oct 30, 2023 | Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. | ||
| CVE-2023-4899 | Hig | 0.00 | 8.8 | 0.01 | Sep 12, 2023 | SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. | ||
| CVE-2023-4898 | Hig | 0.00 | 7.5 | 0.01 | Sep 12, 2023 | Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. | ||
| CVE-2023-4897 | Cri | 0.00 | 9.8 | 0.01 | Sep 11, 2023 | Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
- risk 0.00cvss 8.1epss 0.01
Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need access to the server at some privilege level since this endpoint is protected and requires authorization.
- risk 0.00cvss 7.1epss 0.01
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk…
- risk 0.00cvss 7.5epss 0.01
Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM. This would require…
- risk 0.00cvss 6.5epss 0.01
A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite the intended restriction that prevents 'default' role users from deleting admin-uploaded documents, an attacker can…
- risk 0.00cvss 7.5epss 0.01
The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL ``` http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance ```…
- risk 0.00cvss 6.5epss 0.01
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
- risk 0.00cvss 8.8epss 0.01
As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a…
- risk 0.00cvss 5.9epss 0.00
Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the `!==` used for comparison. The risk is minified by the additional overhead of the request,…
- risk 0.00cvss 5.4epss 0.00
User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads. Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in…
- risk 0.00cvss 7.5epss 0.01
AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash the server…
- risk 0.00cvss 8.8epss 0.01
Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.
- risk 0.00cvss 9.1epss 0.01
Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.
- risk 0.00cvss 8.8epss 0.01
SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.
- risk 0.00cvss 7.5epss 0.01
Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.
- risk 0.00cvss 9.8epss 0.01
Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.
Page 4 of 4