{
  "id": "CVE-2024-4286",
  "sourceIdentifier": "security@huntr.dev",
  "published": "2024-05-26T23:15:21.600",
  "lastModified": "2024-05-28T12:39:28.377",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expression language statement, identified in the commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. The vulnerability arises from the application's handling of user modifications by managers or admins, allowing for the modification of all existing attributes of the `user` database entity without proper checks or sanitization. This flaw can be exploited to delete user threads, denying users access to their previously submitted data, or to inject fake threads and/or chat history for social engineering attacks."
    },
    {
      "lang": "es",
      "value": "La aplicaci\u00f3n Any-llm de Mintplex-Labs es vulnerable a una neutralizaci\u00f3n inadecuada de elementos especiales utilizados en una declaraci\u00f3n de lenguaje de expresi\u00f3n, identificada en el ID de commit `57984fa85c31988b2eff429adfc654c46e0c342a`. La vulnerabilidad surge del manejo por parte de la aplicaci\u00f3n de las modificaciones de los usuarios por parte de los gerentes o administradores, lo que permite la modificaci\u00f3n de todos los atributos existentes de la entidad de base de datos \"usuario\" sin las comprobaciones o sanitizaci\u00f3n adecuadas. Esta falla se puede explotar para eliminar hilos de usuarios, negarles el acceso a sus datos enviados previamente o para inyectar hilos falsos y/o historial de chat para ataques de ingenier\u00eda social."
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "security@huntr.dev",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE",
          "baseScore": 4.9,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "security@huntr.dev",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-917"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/mintplex-labs/anything-llm/commit/1b35bcbeab10b77e6dbd263cceecf1b965a40789",
      "source": "security@huntr.dev"
    },
    {
      "url": "https://huntr.com/bounties/a72d2923-297c-455f-af90-715e83b3da2b",
      "source": "security@huntr.dev"
    }
  ]
}