mintplexlabs kayıtları
mintplexlabs üreticisine ait 74 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %14,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-918 Server-Side Request Forgery (SSRF)6
- CWE-400 Uncontrolled Resource Consumption5
- CWE-20 Improper Input Validation5
- CWE-23 Relative Path Traversal5
- CWE-306 Missing Authentication for Critical Function4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
74 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-6842Kavram kanıtı | Exposure of Sensitive Information in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-306 | Yüksek7,5 | — | %31,1 | 20 Mar 2025 |
39İzleyin | CVE-2024-3025İstismar yok | Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | Kritik9,9 | — | %1,0 | 10 Nis 2024 |
39İzleyin | CVE-2024-3104İstismar yok | Remote Code Execution in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-78 | Kritik9,8 | — | %1,0 | 6 Haz 2024 |
39İzleyin | CVE-2023-4897İstismar yok | Relative Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | Kritik9,8 | — | %0,9 | 11 Eyl 2023 |
39İzleyin | CVE-2024-8196İstismar yok | Missing Authentication for Critical Function in mintplex-labs/anything-llmmintplexlabs · anythingllm desktop · CWE-306 | Kritik9,8 | — | %0,8 | 20 Mar 2025 |
38İzleyin | CVE-2024-3166İstismar yok | Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llmmintplexlabs · anythingllm desktop · CWE-79 | Kritik9,6 | — | %1,0 | 6 Haz 2024 |
38İzleyin | CVE-2026-32626İstismar yok | AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injectionmintplexlabs · anythingllm · CWE-79 | Kritik9,6 | — | %0,7 | 16 Mar 2026 |
37İzleyin | CVE-2024-3033İstismar yok | Improper Authorization in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-863 | Kritik9,4 | — | %0,6 | 6 Haz 2024 |
36İzleyin | CVE-2024-0404İstismar yok | Mass Assignment Vulnerability in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-915 | Kritik9,1 | — | %0,8 | 15 Nis 2024 |
36İzleyin | CVE-2023-5832İstismar yok | Improper Input Validation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-20 | Kritik9,1 | — | %0,7 | 30 Eki 2023 |
36İzleyin | CVE-2024-3279İstismar yok | Improper Access Control in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-306 | Kritik9,1 | — | %0,6 | 12 Ağu 2024 |
35İzleyin | CVE-2026-24477Kavram kanıtı | AnythingLLM has key leak in `systemSettings.js`mintplexlabs · anythingllm · CWE-201 | Yüksek8,7 | — | %1,7 | 26 Oca 2026 |
35İzleyin | CVE-2024-3150İstismar yok | Privilege Escalation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-755 | Yüksek8,8 | — | %0,8 | 6 Haz 2024 |
35İzleyin | CVE-2023-4899İstismar yok | SQL Injection in mintplex-labs/anything-llmmintplexlabs · anything-llm · CWE-89 | Yüksek8,8 | — | %0,8 | 11 Eyl 2023 |
35İzleyin | CVE-2024-0439İstismar yok | User can manually send request at manager permission to modify system configurationsmintplexlabs · anythingllm · CWE-269 | Yüksek8,8 | — | %0,6 | 26 Şub 2024 |
35İzleyin | CVE-2023-5833İstismar yok | Improper Access Control in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-284 | Yüksek8,8 | — | %0,6 | 30 Eki 2023 |
35İzleyin | CVE-2024-3152İstismar yok | Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-918 | Yüksek8,8 | — | %0,6 | 6 Haz 2024 |
35İzleyin | CVE-2026-48116İstismar yok | AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skillmintplexlabs · anythingllm · CWE-77 | Yüksek8,8 | — | %0,5 | 28 May 2026 |
35İzleyin | CVE-2024-3149İstismar yok | SSRF in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-918 | Yüksek8,8 | — | %0,5 | 6 Haz 2024 |
34İzleyin | CVE-2024-13059İstismar yok | Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-29 | Yüksek7,2 | — | %21,3 | 10 Şub 2025 |
34İzleyin | CVE-2024-3110İstismar yok | Stored XSS leading to admin account takeover in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-79 | Yüksek8,7 | — | %0,7 | 6 Haz 2024 |
33İzleyin | CVE-2024-10109İstismar yok | Incorrect Authorization in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-863 | Yüksek8,3 | — | %0,5 | 20 Mar 2025 |
32İzleyin | CVE-2024-0763İstismar yok | Improper validation of document removal parametermintplexlabs · anythingllm · CWE-22 | Yüksek8,1 | — | %0,9 | 27 Şub 2024 |
32İzleyin | CVE-2024-0549İstismar yok | Relative Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | Yüksek8,1 | — | %0,8 | 15 Nis 2024 |
32İzleyin | CVE-2024-3029İstismar yok | Improper Input Validation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-20 | Yüksek8,0 | — | %0,7 | 15 Nis 2024 |
- CVE-2024-684239İzleyin
Exposure of Sensitive Information in mintplex-labs/anything-llm
YüksekCVSS 7,5Kavram kanıtıEPSS %31mintplexlabs · anythingllm20 Mar 2025
- CVE-2024-302539İzleyin
Path Traversal in mintplex-labs/anything-llm
KritikCVSS 9,9İstismar yokEPSS %1mintplexlabs · anythingllm10 Nis 2024
- CVE-2024-310439İzleyin
Remote Code Execution in mintplex-labs/anything-llm
KritikCVSS 9,8İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2023-489739İzleyin
Relative Path Traversal in mintplex-labs/anything-llm
KritikCVSS 9,8İstismar yokEPSS %1mintplexlabs · anythingllm11 Eyl 2023
- CVE-2024-819639İzleyin
Missing Authentication for Critical Function in mintplex-labs/anything-llm
KritikCVSS 9,8İstismar yokEPSS %1mintplexlabs · anythingllm desktop20 Mar 2025
- CVE-2024-316638İzleyin
Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm
KritikCVSS 9,6İstismar yokEPSS %1mintplexlabs · anythingllm desktop6 Haz 2024
- CVE-2026-3262638İzleyin
AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
KritikCVSS 9,6İstismar yokEPSS %1mintplexlabs · anythingllm16 Mar 2026
- CVE-2024-303337İzleyin
Improper Authorization in mintplex-labs/anything-llm
KritikCVSS 9,4İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2024-040436İzleyin
Mass Assignment Vulnerability in mintplex-labs/anything-llm
KritikCVSS 9,1İstismar yokEPSS %1mintplexlabs · anythingllm15 Nis 2024
- CVE-2023-583236İzleyin
Improper Input Validation in mintplex-labs/anything-llm
KritikCVSS 9,1İstismar yokEPSS %1mintplexlabs · anythingllm30 Eki 2023
- CVE-2024-327936İzleyin
Improper Access Control in mintplex-labs/anything-llm
KritikCVSS 9,1İstismar yokEPSS %1mintplexlabs · anythingllm12 Ağu 2024
- CVE-2026-2447735İzleyin
AnythingLLM has key leak in `systemSettings.js`
YüksekCVSS 8,7Kavram kanıtıEPSS %2mintplexlabs · anythingllm26 Oca 2026
- CVE-2024-315035İzleyin
Privilege Escalation in mintplex-labs/anything-llm
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2023-489935İzleyin
SQL Injection in mintplex-labs/anything-llm
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anything-llm11 Eyl 2023
- CVE-2024-043935İzleyin
User can manually send request at manager permission to modify system configurations
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm26 Şub 2024
- CVE-2023-583335İzleyin
Improper Access Control in mintplex-labs/anything-llm
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm30 Eki 2023
- CVE-2024-315235İzleyin
Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llm
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2026-4811635İzleyin
AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm28 May 2026
- CVE-2024-314935İzleyin
SSRF in mintplex-labs/anything-llm
YüksekCVSS 8,8İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2024-1305934İzleyin
Path Traversal in mintplex-labs/anything-llm
YüksekCVSS 7,2İstismar yokEPSS %21mintplexlabs · anythingllm10 Şub 2025
- CVE-2024-311034İzleyin
Stored XSS leading to admin account takeover in mintplex-labs/anything-llm
YüksekCVSS 8,7İstismar yokEPSS %1mintplexlabs · anythingllm6 Haz 2024
- CVE-2024-1010933İzleyin
Incorrect Authorization in mintplex-labs/anything-llm
YüksekCVSS 8,3İstismar yokEPSS %1mintplexlabs · anythingllm20 Mar 2025
- CVE-2024-076332İzleyin
Improper validation of document removal parameter
YüksekCVSS 8,1İstismar yokEPSS %1mintplexlabs · anythingllm27 Şub 2024
- CVE-2024-054932İzleyin
Relative Path Traversal in mintplex-labs/anything-llm
YüksekCVSS 8,1İstismar yokEPSS %1mintplexlabs · anythingllm15 Nis 2024
- CVE-2024-302932İzleyin
Improper Input Validation in mintplex-labs/anything-llm
YüksekCVSS 8,0İstismar yokEPSS %1mintplexlabs · anythingllm15 Nis 2024