CVE-2024-3149

A Server-Side Request Forgery (SSRF) vulnerability exists in the upload link feature of mintplex-labs/anything-llm. This feature, intended for users with manager or admin roles, processes uploaded links through an internal Collector API using a headless browser. An attacker can exploit this by hosting a malicious website and using it to perform actions such as internal port scanning, accessing internal web applications not exposed externally, and interacting with the Collector API. This interaction can lead to unauthorized actions such as arbitrary file deletion and limited Local File Inclusion (LFI), including accessing NGINX access logs which may contain sensitive information.

• CWE-918

• https://github.com/mintplex-labs/anything-llm/commit/f4088d9348fa86dcebe9f97a18d39c0a6e92f15ePatch
• https://huntr.com/bounties/b230d76b-ae2d-440e-a25b-94ffaa7c4ff1Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/mintplex-labs/anything-llm/commit/f4088d9348fa86dcebe9f97a18d39c0a6e92f15ePatch
• https://huntr.com/bounties/b230d76b-ae2d-440e-a25b-94ffaa7c4ff1Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31484A vulnerability has been identified in CPC80 Central Process…7.8
• CVE-2024-31485A vulnerability has been identified in CPCI85 Central Proces…8.6
• CVE-2024-31486A vulnerability has been identified in OPUPI0 AMQP/MQTT (All…6
• CVE-2024-31487A improper limitation of a pathname to a restricted director…6.5
• CVE-2024-31488An improper neutralization of inputs during web page generat…9
• CVE-2024-31489AAn improper certificate validation vulnerability [CWE-295] …8.1
• CVE-2024-31490An exposure of sensitive information to an unauthorized acto…6.5
• CVE-2024-31491A client-side enforcement of server-side security vulnerabil…8.8
• CVE-2024-31492An external control of file name or path vulnerability [CWE-…7.8
• CVE-2024-31493An improper removal of sensitive information before storage …6.5
• CVE-2024-31495A improper neutralization of special elements used in an sql…2.7
• CVE-2024-31496A stack-based buffer overflow vulnerability [CWE-121] in For…6.7