CVE-2024-10833
published 2025-03-20CVE-2024-10833: eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is…
PriorityP261critical9.1CVSS 3.0
AVNACLPRNUINSUCNIHAH
EPSS
0.77%
50.9th percentile
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dbgpt | db-gpt | — | — |
| eosphoros-ai | eosphoros-ai_db-gpt | unspecified – latest | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
ghsa·2025-03-20
CVE-2024-10833 [CRITICAL] CWE-22 DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
OSV
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
osv·2025-03-20
CVE-2024-10833 [CRITICAL] DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-20
Published