PT-2024-38577 · Mintplex · Anything-Llm

Published 2024-10-29 · Updated 2024-10-31 · CVE-2024-7783

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions mintplex-labs/anything-llm versions prior to 1.0.3

Description The issue concerns the improper storage of sensitive information, specifically a password, within a JSON Web Token (JWT) used as a bearer token in single user mode. When decoded, the JWT reveals the password in plaintext, posing significant security risks. An attacker who gains access to the JWT can easily decode it and retrieve the password.

Recommendations For versions prior to 1.0.3, update to version 1.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the JWT to minimize the risk of exploitation. Avoid using the password variable in the affected JWT until the issue is resolved.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2024-7783

Affected Products

Anything-Llm

References · 7

• 🔥 https://huntr.com/bounties/20e9950f-ad41-4d6b-8bd0-c7f7051695b3 · Exploit
• https://github.com/mintplex-labs/anything-llm/commit/4430ddb05988470bc8f0479e7d07db1f7d4646ba · Patch
• https://osv.dev/vulnerability/CVE-2024-7783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7783 · Security Note
• https://twitter.com/UndercodeNews/status/1852098266520780892 · Twitter Post
• https://t.me/cvenotify/100172 · Telegram Post
• https://t.me/cvedetector/9310 · Telegram Post