CVE-2024-0551

Download and export of file via default user role

Severity Score

7.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for exporting would start the download at the same time, which once downloaded - deletes the export from the system. The endpoint for exporting should simply be patched to a higher privilege level.

Habilite las exportaciones de la base de datos y la información exportada asociada del sistema a través del rol de usuario predeterminado. Al atacado se le debería haber concedido acceso al sistema antes del ataque. Vale la pena señalar que la naturaleza determinista del nombre de exportación presenta un riesgo menor ya que la interfaz de usuario para exportar iniciaría la descarga al mismo tiempo, lo que, una vez descargado, elimina la exportación del sistema. El endpoint para la exportación simplemente debe parchearse con un nivel de privilegio más alto.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

Poc

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-01-15 CVE Reserved
2024-02-27 CVE Published
2024-08-01 CVE Updated
2025-07-31 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (2)

URL	Tag	Source
https://github.com/mintplex-labs/anything-llm/commit/7aaa4b38e7112a6cd879c1238310c56b1844c6d8
https://huntr.com/bounties/f114c787-ab5f-4f83-afa5-c000435efb78

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mintplexlabs Search vendor "Mintplexlabs"		Anythingllm Search vendor "Mintplexlabs" for product "Anythingllm"				*		-		Affected