CVE-2023-4899

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.65% chance of exploitation in the next 30 days, 49th percentile

Published

2023-09-11

Updated

2024-09-26

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/70a2fb18-f030-4abb-9ddc-13f94107ac9d

References

• CVE Record
• NVD entry

Related

• CVE-2023-4898
• CVE-2023-49002
• CVE-2023-48974
• CVE-2023-49006
• CVE-2023-4897
• CVE-2023-49007