https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 01:14:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-224021 EUVD-2026-224021 https://cve.radiocsirt.org/vuln/euvd-2026-224021 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10513 <p>A path traversal vulnerability exists in the &#39;document uploads manager&#39; feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the &#39;manager&#39; role to access and manipulate the &#39;anythingllm.db&#39; database file. By exploiting the vulnerable endpoint &#39;/api/document/move-files&#39;, an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.</p> <p>A path traversal vulnerability exists in the &#39;document uploads manager&#39; feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the &#39;manager&#39; role to access and manipulate the &#39;anythingllm.db&#39; database file. By exploiting the vulnerable endpoint &#39;/api/document/move-files&#39;, an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10513 https://cve.radiocsirt.org/vuln/ghsa-45p5-8q33-98hw <p>A path traversal vulnerability exists in the &#39;document uploads manager&#39; feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the &#39;manager&#39; role to access and manipulate the &#39;anythingllm.db&#39; database file. By exploiting the vulnerable endpoint &#39;/api/document/move-files&#39;, an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.</p> <p>A path traversal vulnerability exists in the &#39;document uploads manager&#39; feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the &#39;manager&#39; role to access and manipulate the &#39;anythingllm.db&#39; database file. By exploiting the vulnerable endpoint &#39;/api/document/move-files&#39;, an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.</p> https://cve.radiocsirt.org/vuln/ghsa-45p5-8q33-98hw