SSRF - file:// unsanitized access to underlying host files

The SSRF vulnerability in anything-llm poses a significant risk because it allows attackers to read sensitive files from the server's file system. This could include configuration files containing database credentials, API keys, or other secrets. An attacker could potentially gain access to internal resources and data that should not be publicly accessible. The impact is amplified if the application is running with elevated privileges, as the attacker could then access files owned by the application's user. Successful exploitation could lead to complete compromise of the server and the data it holds.

Applications utilizing the anything-llm Node.js library in versions prior to 1.0.0 are at risk. This includes applications that process user-supplied URLs without proper validation, particularly those deployed in environments where file system access is not strictly controlled. Shared hosting environments where the application has access to the host's file system are particularly vulnerable.

• nodejs / server:

  npm list anything-llm | grep -q '1.0.0' || echo "Vulnerable version detected!" 

• generic web:

  curl -I 'http://your-server/your-endpoint?url=file:///etc/passwd' | grep 'HTTP/1.1 403' # Check for access denied

1. 2024-02-25Disclosure

   disclosure

1. आरक्षित2024-01-11
2. प्रकाशित2024-02-25
3. संशोधित2024-08-28
4. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2024-0440 is to upgrade to version 1.0.0 of the anything-llm library. If upgrading is not immediately feasible, implement strict input validation on any URLs submitted by users. Specifically, filter out or sanitize any requests that include the file:// protocol. Consider using a Web Application Firewall (WAF) to block requests containing suspicious URLs. Additionally, restrict the application's access to the file system to only the necessary directories, minimizing the potential impact of a successful SSRF attack. After upgrade, confirm by attempting a POST request with a file:// URL and verifying that it is rejected.