漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Privilege Escalation via Improper Input Validation in mintplex-labs/anything-llm
Vulnerability Description
In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to escalate privileges by deactivating 'Multi-User Mode'. By sending a specially crafted curl request with the 'multi_user_mode' parameter set to false, an attacker can deactivate 'Multi-User Mode'. This action permits the creation of a new admin user without requiring a password, leading to unauthorized administrative access.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
AnythingLLM 输入验证错误漏洞
Vulnerability Description
AnythingLLM是符合业务要求的文档聊天机器人。 AnythingLLM存在输入验证错误漏洞，该漏洞源于不正确的输入验证漏洞允许攻击者通过停用 Multi-User Mode 来升级权限。
CVSS Information
N/A
Vulnerability Type
N/A