https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:15:27.309697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-13060 CVE-2024-13060 — Improper Authorization in mintplex-labs/anything-llm 2026-10-13T01:15:27.324647+00:00

Affected: mintplex-labs/anything-llm

A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.