CVE-2024-0404

A mass assignment vulnerability exists in the "/api/invite/:code" endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creation of high-privileged accounts. By intercepting and modifying the HTTP request during the account creation process via an invitation link, an attack...