Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-13060
4.3
MEDIUMCVSS v3
Severity scale
010
Description
A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.
Mintplex-Labs/anything-llm
GitHubStop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience
GitHubStop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience NVD