| Package | Affected versions | Patched versions |
|---|---|---|
| anythingllm | < 1.0.0 | 1.0.0 |
Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need access to the server at some privilege level since this endpoint is protected and requires authorization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free