CVE-2024-10835

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10835

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10835.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10835

Aliases

Published

2025-03-20T10:09:31.809Z

Modified

2026-07-15T01:49:12.023400931Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt

Details

In eosphoros-ai/db-gpt version v0.6.0, the web API POST /api/v1/editor/sql/run allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write using DuckDB SQL, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE).

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10835.json",
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/eosphoros-ai/db-gpt

Affected ranges

Type

GIT

Repo

https://github.com/eosphoros-ai/db-gpt

Events

Introduced

b34295562924046c229f0fd424ac3c7b54b7ecc8

Last affected

b34295562924046c229f0fd424ac3c7b54b7ecc8

Database specific

{
    "cpe": "cpe:2.3:a:dbgpt:db-gpt:0.6.0:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        }
    ]
}

Affected versions

0.*

0.6.0

v0.*

v0.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10835.json"