{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:39:53.266","vulnerabilities":[{"cve":{"id":"CVE-2024-0763","sourceIdentifier":"security@huntr.dev","published":"2024-02-27T22:15:14.597","lastModified":"2026-06-17T06:54:12.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need access to the server at some privilege level since this endpoint is protected and requires authorization."},{"lang":"es","value":"Cualquier usuario puede eliminar una carpeta arbitraria (recursivamente) en un servidor remoto debido a una mala sanitización de las entradas que provoca un path traversal. El atacante necesitaría acceso al servidor con algún nivel de privilegio, ya que este endpoint está protegido y requiere autorización."}],"affected":[{"source":"security@huntr.dev","affectedData":[{"vendor":"mintplex-labs","product":"mintplex-labs/anything-llm","versions":[{"version":"unspecified","lessThan":"1.0.0","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"mintplexlabs","product":"anythingllm","defaultStatus":"unknown","cpes":["cpe:2.3:a:mintplexlabs:anythingllm:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"1.0.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV30":[{"source":"security@huntr.dev","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-28T18:09:06.799897Z","id":"CVE-2024-0763","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@huntr.dev","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0","matchCriteriaId":"0D667E32-5A5C-479C-BB81-47F3BCA38C13"}]}]}],"references":[{"url":"https://github.com/mintplex-labs/anything-llm/commit/8a7324d0e77a15186e1ad5e5119fca4fb224c39c","source":"security@huntr.dev","tags":["Patch"]},{"url":"https://huntr.com/bounties/25a2f487-5a9c-4c7f-a2d3-b0527db73ea5","source":"security@huntr.dev","tags":["Exploit"]},{"url":"https://github.com/mintplex-labs/anything-llm/commit/8a7324d0e77a15186e1ad5e5119fca4fb224c39c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://huntr.com/bounties/25a2f487-5a9c-4c7f-a2d3-b0527db73ea5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}}]}