CVE-2023-4898

CVE-2023-4898 describes an authentication bypass in the GitHub repository mintplex-labs/anything-llm, affecting versions prior to 0.0.1. The vulnerability is categorized as an authentication bypass caused by a primary weakness, with the affected component being Anything-LLM. Public references in ...

CVE-2023-4899

The CVE-2023-4899 entry concerns a SQL Injection vulnerability in mintplex-labs/anything-llm (versions prior to 0.0.1). The Red Hat/NVD/NVD-derived entries align on the vulnerability class, with the Huntr PoC detailing a concrete flaw in the /api/workspace/:slug endpoint where the slug parameter ...