dbgpt vulnerabilities
CVEs whose affected-version data names the dbgpt package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
▾ Midnightdbgpt · dbgptEPSS 1.3%via OSV
CVE-2024-10831Critical· 9.1DB-GPT Absolute Path Traversal vulnerability
DB-GPT Absolute Path Traversal vulnerability
▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10833Critical· 9.1DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10901Critical· 9.1DB-GPT Arbitrary File Write vulnerability
DB-GPT Arbitrary File Write vulnerability
▾ Midnightdbgpt · dbgptEPSS 1.1%via OSV
CVE-2024-10835Critical· 9.1DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
▾ Midnightdbgpt · dbgptEPSS 1.2%via OSV
CVE-2024-10830High· 8.2DB-GPT Path Traversal vulnerability
DB-GPT Path Traversal vulnerability
▾ Twilightdbgpt · dbgptEPSS 0.73%via OSV
CVE-2024-10829High· 7.5PoCDB-GPT Uncontrolled Resource Consumption vulnerability
DB-GPT Uncontrolled Resource Consumption vulnerability
▾ Midnightdbgpt · dbgptEPSS 0.73%via OSV
CVE-2024-10906High· 7.1DB-GPT vulnerable to Cross-Site Request Forgery
DB-GPT vulnerable to Cross-Site Request Forgery
▾ Twilightdbgpt · dbgptEPSS 0.25%via OSV