CVE-2024-13059 | mintplex-labs anything-llm up to 1.3.0 Non-ASCII Filename path traversal

A vulnerability has been found in mintplex-labs anything-llm up to 1.3.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Non-ASCII Filename Handler. The manipulation leads to path traversal: ‘..filename’.

This vulnerability is known as CVE-2024-13059. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.