Lucene search
+L

3 matches found

OSV
OSV
added 2024/04/10 5:07 p.m.23 views

CVE-2024-3569 Denial of Service (DoS) Vulnerability in mintplex-labs/anything-llm

A Denial of Service DoS vulnerability exists in the mintplex-labs/anything-llm repository when the application is running in 'just me' mode with a password. An attacker can exploit this vulnerability by making a request to the endpoint using the validatedRequest middleware with a specially crafte...

7.5CVSS7.1AI score
SaveExploits0References4
CVE
CVE
added 2024/04/10 5:07 p.m.97 views

CVE-2024-3569

The CVE-2024-3569 entry concerns the mintplex-labs/anything-llm repository, where running in 'just me' mode with a password enables a DoS via the validatedRequest middleware when an attacker sends a crafted Authorization header. Public documents describe uncontrolled resource consumption leading ...

7.5CVSS7.4AI score0.00776EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2024/04/10 12:00 a.m.11 views

AnythingLLM 资源管理错误漏洞

AnythingLLM is a document chatbot that meets business requirements. A resource management error vulnerability exists in AnythingLLM that stems from a denial of service DoS vulnerability when the application is run in just me mode using a password...

7.5CVSS7.5AI score0.00776EPSS
SaveExploits1References3
Rows per page
Query Builder