TI-2024-00401 CVE-2024-0439 · GHSA-vmr3-wr3f-xmpw
User can manually send request at manager permission to modify system configurations
Priority HIGH 71
As a manager, you should not be able to modify a series of settings.
Vulnerabilities
6 records
TI-2024-00402 CVE-2024-0440 · GHSA-72wm-hh56-9gp6
SSRF - file:// unsanitized access to underlying host files
Priority MEDIUM 64
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
TI-2024-00397 CVE-2024-0435 · GHSA-m8mq-5vgv-8w3r
User can submit message to self-XSS
Priority MEDIUM 58
User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.
TI-2024-00735 CVE-2024-0798 · GHSA-rg89-92m2-5hj6
Privilege Escalation in mintplex-labs/anything-llm
Priority MEDIUM 64
A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'.
TI-2024-00398 CVE-2024-0436 · GHSA-cg5m-p8pg-93cg
Prevent timing attack for single-user password check
Priority LOW 27
Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the `!==` used for comparison.
TI-2024-00416 CVE-2024-0455 · GHSA-32rv-jjcf-cmrm
SSRF on AWS deployed instances of AnythingLLM via /metadata
Priority HIGH 66
The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL ``` http://169.254.169.254/latest/meta-data/identity…