Vulnerabilities

TI-2023-04510 CVE-2023-4899 · GHSA-q2qw-qjgf-3hwm

SQL Injection in mintplex-labs/anything-llm

HIGH 73

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00784 Published 2023-09-11 Fixed in 0.0.1 CWE-89

TI-2023-04509 CVE-2023-4898 · GHSA-hhj7-6jp7-94j9

HIGH 72

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00688 Published 2023-09-11 Fixed in 0.0.1 CWE-305

TI-2023-04508 CVE-2023-4897 · GHSA-v78g-p78j-5486

HIGH 76

Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00899 Published 2023-09-11 Fixed in 0.0.1 CWE-23