漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Missing Authentication for Critical Function in mintplex-labs/anything-llm
Vulnerability Description
In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vulnerability allows an attacker to gain full backend access, enabling them to perform actions such as deleting all data from the workspace.
CVSS Information
N/A
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
anything-llm 访问控制错误漏洞
Vulnerability Description
anything-llm是Mintplex开源的一个一体式桌面和 Docker AI 应用程序。 anything-llm v1.5.11桌面版存在访问控制错误漏洞，该漏洞源于应用程序默认在0.0.0.0上打开服务器端口3001且无身份验证，攻击者可以获得完整的后端访问权限。
CVSS Information
N/A
Vulnerability Type
N/A