DoS Vulnerability in 'just me' Mode with Password

CVE-2024-3569

What is CVE-2024-3569?

A Denial of Service vulnerability exists within the Anything-LLM product developed by Mintplex Labs, specifically affecting its operation in 'just me' mode when secured with a password. An attacker can exploit this issue by sending a specially crafted 'Authorization:' header in requests processed by the validatedRequest middleware. This can lead to uncontrolled consumption of system resources, effectively resulting in a Denial of Service condition that disrupts availability for legitimate users.

References