PT-2024-24122 · Mintplex · Anything-Llm

Published 2024-06-06 · Updated 2024-11-04 · CVE-2024-3150

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mintplex-labs/anything-llm (affected versions not specified)

Description A vulnerability exists in the thread update process, allowing users with Default or Manager roles to escalate their privileges to Administrator. This issue arises from improper input validation when handling HTTP POST requests to the endpoint "/workspace/:slug/thread/:threadSlug/update". The application fails to validate or check user input before passing it to the workspace thread Prisma model for execution, allowing attackers to craft a Prisma relation query operation that manipulates the users model to change a user's role to admin. Successful exploitation grants attackers the highest level of user privileges, enabling them to see and perform all actions within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2024-3150

Affected Products

Anything-Llm

References · 8

• 🔥 https://huntr.com/bounties/745f5c80-14ea-4055-9f15-a066ae93e5a3 · Exploit
• https://github.com/mintplex-labs/anything-llm/commit/200bd7f0615347ed2efc07903d510e5a208b0afc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-3150 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3150 · Vendor Advisory
• https://t.me/cvenotify/100483 · Telegram Post
• https://t.me/cvenotify/99416 · Telegram Post
• https://twitter.com/CVEnew/status/1798795451887653289 · Twitter Post
• https://twitter.com/CveFindCom/status/1798799736285303240 · Twitter Post