A vulnerability was found in mintplex-labs anything-llm up to 0.x. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/system/upload-logo of the component Logo Filename Handler. The manipulation leads to relative path traversal.
This vulnerability is handled as CVE-2024-3025. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
