Beveiligingsadvies

CVE-2024-8248

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:11:32

Laatst bijgewerkt 2025-03-20 14:11:09

Toegewezen door @huntr_ai

CVSS-score 7.2

Status PUBLISHED

Beschrijving

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.

← Alle CVE's bekijken Bekijk op cve.org ↗