Mintplex-Labs Anything-Llm vulnerabilities

CVE-2024-0550 [MEDIUM] CWE-23 CVE-2024-0550: A user who is privileged already `manager` or `admin` can set their profile picture via the frontend A user who is privileged already `manager` or `admin` can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack.

CVE-2024-0440 [MEDIUM] CWE-918 CVE-2024-0440: Attacker, with permission to submit a link or submits a link via POST to be collected that is using Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.

CVE-2024-0551 [HIGH] CWE-284 CVE-2024-0551: Enable exports of the database and associated exported information of the system via the default use Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for exporting would start the download at the same time, which once

CVE-2024-5213 [MEDIUM] CWE-201 CVE-2024-5213: In mintplex-labs/anything-llm versions up to and including 1.5.3, an issue was discovered where the In mintplex-labs/anything-llm versions up to and including 1.5.3, an issue was discovered where the password hash of a user is returned in the response after login (`POST /api/request-token`) and after account creations (`POST /api/admin/users/new`). This exposure occurs because the entire User object, including the bcrypt password hash, is included in

CVE-2024-2913 [MEDIUM] CWE-367 CVE-2024-2913: A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically wit A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can exploit this vulnerability by sending multiple concurrent requests to accept a single user invite, allowing the creation of multiple user accounts from a single invite link intended for only one user

CVE-2024-0765 [MEDIUM] CWE-200 CVE-2024-0765: As a default user on a multi-user instance of AnythingLLM, you could execute a call to the `/export- As a default user on a multi-user instance of AnythingLLM, you could execute a call to the `/export-data` endpoint of the system and then unzip and read that export that would enable you do exfiltrate data of the system at that save state. This would require the attacked to be granted explicit access to the system, but they can do this at any role. A

CVE-2024-3153 [MEDIUM] CWE-400 CVE-2024-3153: mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition. Specifically, the server can be shut down by sending an invalid upload request. An attacker with the ability to upload documents can exploit this vulnerability to cause a DOS condition

CVE-2024-5208 [MEDIUM] CWE-770 CVE-2024-5208: An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex- An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex-labs/anything-llm. This vulnerability allows attackers to cause a denial of service (DOS) by shutting down the server through sending invalid upload requests. Specifically, the server can be made to shut down by sending an empty body with a 'Content-Len

CVE-2024-7771 [MEDIUM] CWE-400 CVE-2024-7771: A vulnerability in the Dockerized version of mintplex-labs/anything-llm (latest, digest 1d9452da2b92 A vulnerability in the Dockerized version of mintplex-labs/anything-llm (latest, digest 1d9452da2b92) allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from the localWhisper implementation, where resampling the

CVE-2024-0436 [MEDIUM] CWE-203 CVE-2024-0436: Theoretically, it would be possible for an attacker to brute-force the password for an instance in s Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the `!==` used for comparison. The risk is minified by the additional overhead of the request, which varies in a non-constant nature making the attack less reliable to e

CVE-2024-8251 [MEDIUM] CWE-89 CVE-2024-8251: A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. Th A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-chat" where user-provided JSON is directly taken to the Prisma library's where clause. An attacker can exploit this by providing a specially crafted JSON object, such as {"sessionId":{"not":"a"}}

CVE-2024-3102 [MEDIUM] CWE-307 CVE-2024-3102: A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the pa

CVE-2024-3570 [MEDIUM] CWE-79 CVE-2024-3570: A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the mintplex-l A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the mintplex-labs/anything-llm repository, allowing attackers to execute arbitrary JavaScript in the context of a user's session. By manipulating the ChatBot responses, an attacker can inject malicious scripts to perform actions on behalf of the user, such as creating

CVE-2024-0435 [MEDIUM] CWE-79 CVE-2024-0435: User can send a chat that contains an XSS opportunity that will then run when the chat is sent and o User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads. Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in which the XSS renders is only limited to the user who submits the XSS. Ult

CVE-2024-4286 [MEDIUM] CWE-917 CVE-2024-4286: Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expression language statement, identified in the commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. The vulnerability arises from the application's handling of user modifications by managers or admins, allowing for the modification of all

CVE-2024-4284 [MEDIUM] CWE-400 CVE-2024-4284: A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of 0. This issue affects the current version of the software, with the latest commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. By exploiting this vulnerability, an attacker, with manager or ad

CVE-2024-13060 [MEDIUM] CWE-862 CVE-2024-13060: A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.