CVE-2024-10833: falha crítica em eosphoros-ai/db-gpt
Arbitrary File Write in eosphoros-ai/db-gpt
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.8%
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
eosphoros-ai · eosphoros-ai/db-gptCVEs relacionadas — eosphoros-ai/db-gpt
No mesmo produto, das mais perigosas para as menos.
CVE-2024-10902CRITICALArbitrary File Upload with Path Traversal in eosphoros-ai/db-gptEPSS 1.3%CVE-2024-10835CRITICALArbitrary File Write via SQL Injection in eosphoros-ai/db-gptEPSS 1.2%CVE-2024-10901CRITICALArbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gptEPSS 1.1%CVE-2024-10831CRITICALArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptEPSS 0.8%CVE-2024-10830HIGHPath Traversal in eosphoros-ai/db-gptEPSS 0.7%CVE-2024-10829HIGHDenial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptEPSS 0.7%