Read the docs

mintplex-labs

Records78All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

mintplex-labs records in CISA KEV

No mintplex-labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Anythingllm 67 records HIGH Anything-llm 2 records HIGH Anythingllm Desktop 2 records HIGH Anythingllm Docker 2 records HIGH Vector Admin 1 record LOW

Records

2 records in Anythingllm Docker · all components

TI-2024-02966 CVE-2024-3166 · GHSA-g2q4-9pcj-78cw

Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

Priority HIGH 74

A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0097 Published 2024-06-06 Fixed in 1.4.2 CWE-79
TI-2024-12108 CVE-2024-13060 · GHSA-mjvp-pg3h-wh59

Improper Authorization in mintplex-labs/anything-llm

Priority MEDIUM 53

A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0049 Published 2025-03-20 Fixed in 1.3.1 CWE-862
Open these records in search →