CVE-2024-0759

🗓️ 27 Feb 2024 05:12:38Reported by @huntr_aiType

Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM. This would require the attacker also be able to guess these internal IPs as `/*` ranging is not possible, but could be brute forced. There is a duty of care that other services on the same network would not be fully open and accessible via a simple CuRL with zero authentication

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-0759	27 Feb 202407:26	–	circl
CNNVD	AnythingLLM Code Issue Vulnerability	27 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-0759 Collection of internally resolving IPs	27 Feb 202405:12	–	cvelist
EUVD	EUVD-2024-16547	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0759	27 Feb 202406:15	–	nvd
Prion	Authentication flaw	27 Feb 202406:15	–	prion
Positive Technologies	PT-2024-15799 · Unknown · Anything-Llm	26 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-0759	4 Feb 202523:09	–	redhatcve
Vulnrichment	CVE-2024-0759 Collection of internally resolving IPs	27 Feb 202405:12	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

mintplexlabs anythingllmRange<1.0.0

[
  {
    "vendor": "mintplex-labs",
    "product": "mintplex-labs/anything-llm",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.0.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/9a978edd-ac94-41fc-8e3e-c35441bdd12b
github	www.github.com/mintplex-labs/anything-llm/commit/0db6c3b2aa1787a7054ffdaba975474f122c20eb

04 Mar 2025 14:34Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

CVSS 37.7

EPSS0.00408

SSVC

CWE-918