CVE-2024-10831

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10831

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10831.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10831

Aliases

Published

2025-03-20T10:09:08.548Z

Modified

2026-08-12T03:51:42.242928923Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt

Details

In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the file_key and doc_file.filename parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.

Database specific

{
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-36"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10831.json"
}

References

Affected packages

Git / github.com/eosphoros-ai/db-gpt

Affected ranges

Type

GIT

Repo

https://github.com/eosphoros-ai/db-gpt

Events

Introduced

b34295562924046c229f0fd424ac3c7b54b7ecc8

Last affected

b34295562924046c229f0fd424ac3c7b54b7ecc8

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:dbgpt:db-gpt:0.6.0:*:*:*:*:*:*:*"
}

Affected versions

0.*

0.6.0

v0.*

v0.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10831.json"