2024-12-08 03:06:42 +00:00

72 lines
3.2 KiB
JSON

{
"id": "CVE-2024-4286",
"sourceIdentifier": "security@huntr.dev",
"published": "2024-05-26T23:15:21.600",
"lastModified": "2024-11-21T09:42:32.600",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expression language statement, identified in the commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. The vulnerability arises from the application's handling of user modifications by managers or admins, allowing for the modification of all existing attributes of the `user` database entity without proper checks or sanitization. This flaw can be exploited to delete user threads, denying users access to their previously submitted data, or to inject fake threads and/or chat history for social engineering attacks."
},
{
"lang": "es",
"value": "La aplicaci\u00f3n Any-llm de Mintplex-Labs es vulnerable a una neutralizaci\u00f3n inadecuada de elementos especiales utilizados en una declaraci\u00f3n de lenguaje de expresi\u00f3n, identificada en el ID de commit `57984fa85c31988b2eff429adfc654c46e0c342a`. La vulnerabilidad surge del manejo por parte de la aplicaci\u00f3n de las modificaciones de los usuarios por parte de los gerentes o administradores, lo que permite la modificaci\u00f3n de todos los atributos existentes de la entidad de base de datos \"usuario\" sin las comprobaciones o sanitizaci\u00f3n adecuadas. Esta falla se puede explotar para eliminar hilos de usuarios, negarles el acceso a sus datos enviados previamente o para inyectar hilos falsos y/o historial de chat para ataques de ingenier\u00eda social."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-917"
}
]
}
],
"references": [
{
"url": "https://github.com/mintplex-labs/anything-llm/commit/1b35bcbeab10b77e6dbd263cceecf1b965a40789",
"source": "security@huntr.dev"
},
{
"url": "https://huntr.com/bounties/a72d2923-297c-455f-af90-715e83b3da2b",
"source": "security@huntr.dev"
},
{
"url": "https://github.com/mintplex-labs/anything-llm/commit/1b35bcbeab10b77e6dbd263cceecf1b965a40789",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://huntr.com/bounties/a72d2923-297c-455f-af90-715e83b3da2b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}