Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqp7-6vh9-99r6

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.

EPSS

Процентиль: 47%
0.0024
Низкий

7.2 High

CVSS3

Дефекты

CWE-29

Связанные уязвимости

CVSS3: 7.2
nvd
11 месяцев назад

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.

EPSS

Процентиль: 47%
0.0024
Низкий

7.2 High

CVSS3

Дефекты

CWE-29