icon

We found results for “

CVE-2024-10834

Date: March 20, 2025

eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to "os.path.join", enabling an attacker to write files to arbitrary locations on the target server. This vulnerability can be exploited by setting the "doc_file.filename" to an absolute path, which can lead to overwriting system files or creating new SSH-key entries.

Severity Score

Severity Score

Weakness Type (CWE)

External Control of File Name or Path

CWE-73

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us