AnythingLLM HTTP smuggling / improper-input vulnerability
Date: 2024-06
Affected: anything-llm
Attack vector: other
Category: real-world
Severity: High
CVE: CVE-2024-5566
CVSS: 7.5 ()

Vulnerability in mintplex-labs/anything-llm related to improper input handling allowing unauthenticated abuse of an exposed endpoint.


Mitigations:

Architectural layers (MAESTRO):