Dbgpt

CVE-2025-6772 Jun 27, 19:15 MEDIUM POC This Month

We need to produce a JSON with all required fields, synthesizing data from all sources. We are told: "A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." CVSS: 5.5, CVSS vector: 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P ... So it's a critical classification from vuldb, but CVSS 5.5 is medium. Actually CVSS 4.0 base score? 5.5 is medium. The EPSS: 0.43% (62 percentile) moderate. POC is publicly available, no KEV. CPE: cpe:2.3:a:dbgpt:db-gpt:*:*:*:*:*:*:*:*. Tags: Path Traversal. References: NVD link to github issue, vuldb entries. Affected versions from EUVD: db-gpt 0.7.1, 0.7.0, 0.7.2. (up to 0.7.2). We need to produce: product_name (1-3 words): "db-gpt" maybe? It's eosphoros-ai DB-GPT. I'd say "DB-GPT". Product name: "db-gpt" according to CPE. We'll output "DB-GPT". Summary: not copying description, write original synthesis: e.g., "Path traversal in DB-GPT up to 0.7.2 allows remote unauthenticated attackers to upload arbitrary files via the import_flow endpoint." The description: manipulation of argument File leads to path traversal. The import_flow endpoint likely expects a file upload and then path traversal on the filename? So file upload traversal. "Allows remote attackers to write files to arbitrary locations on the server, potentially leading to code execution." But need to ground in data. CVSS vector says VC:L/VI:L/VA:L so confidentiality, integrity, availability all low. So low impact. But critical classification might be hyperbole. We'll synthesize: "Path traversal in the AWEL flow import functionality allows remote attackers to overwrite or create files outside the intended directory, potentially leading to low-level system compromise."

CVE-2025-0452 Mar 20, 10:15 HIGH POC This Week

eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10906 Mar 20, 10:15 PyPI HIGH POC This Week

In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10902 Mar 20, 10:15 PyPI CRITICAL POC Act Now

In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10901 Mar 20, 10:15 PyPI CRITICAL POC Act Now

In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10835 Mar 20, 10:15 PyPI CRITICAL POC PATCH Act Now

In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10834 Mar 20, 10:15 CRITICAL POC Act Now

eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10833 Mar 20, 10:15 PyPI CRITICAL POC PATCH Act Now

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10831 Mar 20, 10:15 PyPI CRITICAL POC Act Now

In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10830 Mar 20, 10:15 PyPI HIGH POC This Week

A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-10829 Mar 20, 10:15 PyPI HIGH POC This Month

A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.