CVE-2024-7783 Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm
Attackers can decode JWTs in single-user mode to retrieve plaintext passwords, leading to credential theft and potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7783?
CVE-2024-7783 is a medium-severity vulnerability in Mintplexlabs Anythingllm, published on 29 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
mintplex-labs/anything-llm version latest contains a vulnerability where sensitive information, specifically a password, is improperly stored within a JWT (JSON Web Token) used as a bearer token in single user mode. When decoded, the JWT reveals the password in plaintext. This improper storage of sensitive information poses significant security risks, as an attacker who gains access to the JWT can easily decode it and retrieve the password. The issue is fixed in version 1.0.3.
Weakness: CWE-312
Which versions are affected by CVE-2024-7783?
It affects 1 product.
Products include Mintplexlabs Anythingllm.
How do I fix CVE-2024-7783?
No fix has been published for CVE-2024-7783 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-7783 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-7783 exists.
Other vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
Sources
Also known as GHSA-rxmp-x6cw-79xv.