@huntr_aiCVELIST:CVE-2024-3025CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
9.9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this vulnerability by manipulating the logo filename to reference files outside of the restricted directory. This can lead to unauthorized reading or deletion of files by utilizing the /api/system/upload-logo and /api/system/logo endpoints. The issue stems from the lack of filtering or validation on the logo filename, allowing attackers to target sensitive files such as the application’s database.
CNA Affected
[
{
"vendor": "mintplex-labs",
"product": "mintplex-labs/anything-llm",
"versions": [
{
"version": "unspecified",
"lessThan": "1.0.0",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
9.9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%