Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mintplex-labs — Vulnerabilities & Security Advisories 77

Browse all 77 CVE security advisories affecting mintplex-labs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mintplex Labs operates as a software development entity, primarily known for creating blockchain-based applications and smart contract solutions. An analysis of its public vulnerability record reveals 69 assigned CVEs, indicating a significant historical exposure to security flaws. The most prevalent vulnerability classes associated with the organization’s codebase include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation issues. These defects often stem from inadequate input validation and improper access control mechanisms within their web interfaces and backend services. While specific major incidents involving data breaches are not widely documented in public threat intelligence feeds, the high volume of CVEs suggests systemic weaknesses in their software development lifecycle. This pattern highlights the critical need for rigorous static and dynamic analysis in blockchain-related projects to mitigate risks associated with complex smart contract interactions and standard web application vulnerabilities.

CVE ID Title CVSS Severity Published
CVE-2024-0550 Privileged User using traversal to read system files — mintplex-labs/anything-llm CWE-23 4.9 - 2024-02-28
CVE-2024-0763 Improper validation of document removal parameter — mintplex-labs/anything-llm CWE-22 8.1 - 2024-02-27
CVE-2024-0551 Download and export of file via default user role — mintplex-labs/anything-llm CWE-284 7.1 - 2024-02-27
CVE-2024-0759 Collection of internally resolving IPs — mintplex-labs/anything-llm CWE-918 9.3 - 2024-02-27
CVE-2024-0439 User can manually send request at manager permission to modify system configurations — mintplex-labs/anything-llm CWE-269 4.3 - 2024-02-25
CVE-2024-0440 SSRF - file:// unsanitized access to underlying host files — mintplex-labs/anything-llm CWE-918 6.5 - 2024-02-25
CVE-2024-0435 User can submit message to self-XSS — mintplex-labs/anything-llm CWE-79 5.4 - 2024-02-25
CVE-2024-0798 Privilege Escalation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-272 4.9 - 2024-02-25
CVE-2024-0436 Prevent timing attack for single-user password check — mintplex-labs/anything-llm CWE-203 6.7 - 2024-02-25
CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata — mintplex-labs/anything-llm CWE-918 8.8 - 2024-02-25
CVE-2024-0879 Authentication bypass in vector-admin domain restriction — vector-admin CWE-287 6.5 Medium 2024-01-25
CVE-2024-22422 Unauthenticated Denial of Service (DOS) attack in AnythingLLM — anything-llm CWE-754 7.5 High 2024-01-19
CVE-2023-5833 Improper Access Control in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-284 9.1 - 2023-10-30
CVE-2023-5832 Improper Input Validation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-20 9.8 - 2023-10-30
CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-89 9.8 - 2023-09-11
CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-305 9.8 - 2023-09-11
CVE-2023-4897 Relative Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-23 9.1 - 2023-09-11

This page lists every published CVE security advisory associated with mintplex-labs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.