ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.
Path traversal in mintplex-labs/anything-llm (CVE-2024-10513)
A path traversal vulnerability (CVE-2024-10513) was identified in anything-llm's move-files function that could be exploited by administrators. Mintplex Labs released a patch to address the security flaw.
AII-1001-85581
What happened
A path traversal vulnerability was discovered in the move-files function of anything-llm that could be exploited by users with administrator privileges.
Governance controls
Mintplex Labs released a patch to address the path traversal vulnerability in the move-files functionality.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.