Description
As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a standard HTTP request
While this is not a critical vulnerability, it does indeed need to be patched to enforce the expected permission level.
While this is not a critical vulnerability, it does indeed need to be patched to enforce the expected permission level.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| mintplex-labs | mintplex-labs/anything-llm | affected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-16234 | As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a standard HTTP request While this is not a critical vulnerability, it does indeed need to be patched to enforce the expected permission level. |
References
History
No history.
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: @huntr_ai
Published:
Updated: 2024-08-21T15:10:35.855Z
Reserved: 2024-01-11T19:54:59.182Z
Link: CVE-2024-0439
Vulnrichment
Updated: 2024-08-01T18:04:49.767Z
NVD
Status : Awaiting Analysis
Published: 2024-02-26T16:27:50.490
Modified: 2024-11-21T08:46:35.647
Link: CVE-2024-0439
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses