CVE-2024-10902

Published: Mar 20, 2025Modified: Oct 15, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python's `/site-packages/` directory.

Affected (1)

Products: Dbgpt: Db Gpt

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dbgpt Db Gpt	Version 0.6.0

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://huntr.com/bounties/f7fbf76e-aa1c-4106-b007-e9579f4f7d5f

Source: security@huntr.dev

ExploitThird Party Advisory

Timeline

No history available yet.