CVE-2024-0795
PoC —CVSS 3.1
7.2 high
EPSS
<1%p59
Published
()
Modified
Description
If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating a new user with an `admin` role and then be able to use this new account to have elevated privileges on the instance
- Vendors
- mintplexlabs
- Products
- anythingllm
- Weakness
- CWE-284
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.