CVE-2024-10833

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10833

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10833.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10833

Aliases

Published

2025-03-20T10:10:15.995Z

Modified

2026-07-15T01:49:02.243719232Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Arbitrary File Write in eosphoros-ai/db-gpt

Details

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.

Database specific

{
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-36"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10833.json"
}

References

Affected packages

Git / github.com/eosphoros-ai/db-gpt

Affected ranges

Type

GIT

Repo

https://github.com/eosphoros-ai/db-gpt

Events

Introduced

b34295562924046c229f0fd424ac3c7b54b7ecc8

Last affected

b34295562924046c229f0fd424ac3c7b54b7ecc8

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:dbgpt:db-gpt:0.6.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        }
    ]
}

Affected versions

0.*

0.6.0

v0.*

v0.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10833.json"