CVE-2024-8248 — Path Traversal in mintplex-labs/anything-llm
A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storag…
Published: 2025-03-20 · CVSS: 7.2 · CVSS 3.0
A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7