CVE-2024-10901

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10901

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10901.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10901

Aliases

Published

2025-03-20T10:09:40.856Z

Modified

2026-07-15T01:49:00.386367260Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt

Details

In eosphoros-ai/db-gpt version v0.6.0, the web API POST /api/v1/editor/chart/run allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE) by writing malicious files such as __init__.py in the Python's /site-packages/ directory.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10901.json",
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-434"
    ]
}

References

Affected packages

Git / github.com/eosphoros-ai/db-gpt

Affected ranges

Type

GIT

Repo

https://github.com/eosphoros-ai/db-gpt

Events

Introduced

b34295562924046c229f0fd424ac3c7b54b7ecc8

Last affected

b34295562924046c229f0fd424ac3c7b54b7ecc8

Database specific

{
    "cpe": "cpe:2.3:a:dbgpt:db-gpt:0.6.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

0.*

0.6.0

v0.*

v0.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10901.json"