漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Incorrect Authorization in mintplex-labs/anything-llm
Vulnerability Description
A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access enables them to modify the model's API key and base path, leading to potential API key leakage and denial of service on chats.
CVSS Information
N/A
Vulnerability Type
授权机制不正确
Vulnerability Title
anything-llm 安全漏洞
Vulnerability Description
anything-llm是Mintplex开源的一个一体式桌面和 Docker AI 应用程序。 anything-llm存在安全漏洞，该漏洞源于低权限用户可访问敏感API端点，可能导致API密钥泄露和拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A