Beveiligingsadvies

CVE-2024-8196

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:11:34

Laatst bijgewerkt 2025-03-20 13:50:28

Toegewezen door @huntr_ai

CVSS-score 9.8

Status PUBLISHED

Beschrijving

In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vulnerability allows an attacker to gain full backend access, enabling them to perform actions such as deleting all data from the workspace.

← Alle CVE's bekijken Bekijk op cve.org ↗