Vulnerabilities in mintplex-labs

75 results
Vexday analysis

Com 57 CVEs catalogadas, o portfólio de vulnerabilidades da Mintplex Labs concentra 15 falhas de severidade crítica, o que representa parcela expressiva do total e merece atenção prioritária em programas de gestão de risco. A taxa de exploração ativa está abaixo da média geral do catálogo KEV, e nenhuma PoC pública foi identificada até o momento, o que reduz temporariamente a superfície de ataque imediata, mas não elimina o risco. A falha mais recorrente é CWE-918 (Server-Side Request Forgery), padrão que frequentemente permite a um atacante abusar do servidor para acessar recursos internos não expostos diretamente. A CVE mais perigosa em acompanhamento é CVE-2024-6842, com score EPSS de 0,2919 — valor que indica probabilidade de exploração não negligenciável e justifica priorização nas rotinas de patching.

CVE-2024-6842HIGHExposure of Sensitive Information in mintplex-labs/anything-llmEPSS 30.8%CVE-2024-13059HIGHPath Traversal in mintplex-labs/anything-llmEPSS 21.3%CVE-2026-24477HIGHAnythingLLM has key leak in `systemSettings.js`EPSS 1.6%CVE-2024-5211CRITICALPath Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llmEPSS 1.0%CVE-2024-22422HIGHUnauthenticated Denial of Service (DOS) attack in AnythingLLMEPSS 1.0%CVE-2024-3025CRITICALPath Traversal in mintplex-labs/anything-llmEPSS 1.0%CVE-2024-0759HIGHCollection of internally resolving IPsEPSS 1.0%CVE-2024-3104CRITICALRemote Code Execution in mintplex-labs/anything-llmEPSS 1.0%CVE-2024-3166LOWCross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llmEPSS 1.0%CVE-2024-3283HIGHPrivilege Escalation via Mass Assignment in mintplex-labs/anything-llmEPSS 0.9%CVE-2024-0795HIGHCreate user API role not enforced EPSS 0.9%CVE-2024-0763HIGHImproper validation of document removal parameterEPSS 0.9%CVE-2026-24478HIGHAnythingLLM vulnerable to Path TraversalEPSS 0.9%CVE-2024-3028HIGHImproper Input Validation in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-10513HIGHPath Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-8248HIGHPath Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-0549HIGHRelative Path Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-0455CRITICALSSRF on AWS deployed instances of AnythingLLM via /metadataEPSS 0.8%CVE-2026-5627CRITICALPath Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-3150HIGHPrivilege Escalation in mintplex-labs/anything-llmEPSS 0.8%