CVE-2023-5832

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
mintplex-labs	mintplex-labs/anything-llm	>= unspecified, < 0.1.0
mintplexlabs	anythingllm	< 0.1.0

References

https://github.com/mintplex-labs/anything-llm/commit/18798c5b640018aaee924e0afd941705d88df92ePatch
https://huntr.com/bounties/afee3726-571f-416e-bba5-0828c815f5dfExploit, Patch, Third Party Advisory
https://github.com/mintplex-labs/anything-llm/commit/18798c5b640018aaee924e0afd941705d88df92ePatch
https://huntr.com/bounties/afee3726-571f-416e-bba5-0828c815f5dfExploit, Patch, Third Party Advisory

Timeline

Published: Oct 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-58338.8Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.CVE-2023-58347.8HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential f CVE-2023-58356.1A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file s CVE-2023-58369.8A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown CVE-2023-58376.1A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of th CVE-2023-58389.8Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.CVE-2023-58397.8Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.CVE-2023-58408.8Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.CVE-2023-58419.1Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation O CVE-2023-58424.8Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.CVE-2023-58439.8The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_CVE-2023-58447.2Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.