Is CVE-2024-4284 actively exploited?

CVE-2024-4284 has no public evidence of in-the-wild exploitation as of 2025-07-10.

What is the CVSS score for CVE-2024-4284?

CVE-2024-4284 has a CVSS score of 4.9 (MEDIUM severity). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

How do I patch CVE-2024-4284?

Patch guidance is available from mintplexlabs security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-4284.

Which products are affected by CVE-2024-4284?

1 product: mintplexlabs anythingllm.

CVE-2024-4284 - remediation guidance & executive summary

Description

A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of 0. This issue affects the current version of the software, with the latest commit id `57984fa85c31988b2eff429adfc654c46e0c342a`. By exploiting this vulnerability, an attacker, with manager or admin privileges, can render a chosen account completely inaccessible. The application's mechanism for suspending accounts does not provide a means to reverse this condition through the UI, leading to uncontrolled resource consumption. The vulnerability is introduced due to the lack of input validation and sanitization in the user modification endpoint and the middleware's token validation logic. This issue has been addressed in version 1.0.0 of the software.

CVSS Metrics

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector: network
Complexity: low
Privileges: high
User Action: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Weaknesses: CWE-400NVD-CWE-noinfo

Metadata

Primary Vendor: MINTPLEXLABS
Published: 5/19/2024
Last Modified: 7/10/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

mintplexlabs : anythingllm

Remediation Guidance

Executive Summary

Cite this page

CVE-2024-4284. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2024-4284

View on NIST NVD

CVE-2024-4284 vulnerability