CVE-2024-3570 Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llm
Stored XSS in AnythingLLM allows attackers to take over admin accounts by injecting scripts via malicious ChatBot responses.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-3570?
CVE-2024-3570 is a cross-site scripting vulnerability in Mintplexlabs Anythingllm, published on 10 Apr 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the mintplex-labs/anything-llm repository, allowing attackers to execute arbitrary JavaScript in the context of a user's session. By manipulating the ChatBot responses, an attacker can inject malicious scripts to perform actions on behalf of the user, such as creating a new admin account or changing the user's password, leading to a complete takeover of the AnythingLLM application. The vulnerability stems from the improper sanitization of user and ChatBot input, specifically through the use of `dangerouslySetInnerHTML`. Successful exploitation requires convincing an admin to add a malicious LocalAI ChatBot to their AnythingLLM instance.
Weakness: CWE-79
Which versions are affected by CVE-2024-3570?
It affects 1 product.
Products include Mintplexlabs Anythingllm.
How do I fix CVE-2024-3570?
No fix has been published for CVE-2024-3570 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2024-3570 being exploited?
There is no known exploitation of CVE-2024-3570 in the wild and no public exploit code.
Other vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
Sources
Also known as GHSA-wx55-ppw9-52p9.