https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 10:36:08 +0000 https://cve.radiocsirt.org/vuln/cve-2024-4287 <p><strong>Affected:</strong> mintplex-labs/anything-llm, mintplexlabs anythingllm</p> <p>In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to validate or format JSON data sent in an HTTP POST request to `/api/workspace/:workspace-slug/update`, allowing it to be executed as part of a database query without restrictions. This flaw enables users with a manager role to craft a request that includes nested write operations, effectively allowing them to create new Administrator accounts.</p> <p><strong>Affected:</strong> mintplex-labs/anything-llm, mintplexlabs anythingllm</p> <p>In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to validate or format JSON data sent in an HTTP POST request to `/api/workspace/:workspace-slug/update`, allowing it to be executed as part of a database query without restrictions. This flaw enables users with a manager role to craft a request that includes nested write operations, effectively allowing them to create new Administrator accounts.</p> https://cve.radiocsirt.org/vuln/cve-2024-4287