dbgpt has 8 CVEs on record. The median CVSS is 9.1 (critical), with 5 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
8
Total CVEs
5
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2024-10829High· 7.5DB-GPT Uncontrolled Resource Consumption vulnerability53CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal50CVE-2024-10901Critical· 9.1DB-GPT Arbitrary File Write vulnerability50CVE-2024-10835Critical· 9.1DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users50CVE-2024-10833Critical· 9.1DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload50
dbgpt vulnerabilities
CVEs affecting dbgpt, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
▾ Midnightdbgpt · dbgptEPSS 1.3%via OSV
CVE-2024-10831Critical· 9.1DB-GPT Absolute Path Traversal vulnerability
DB-GPT Absolute Path Traversal vulnerability
▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10833Critical· 9.1DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10901Critical· 9.1DB-GPT Arbitrary File Write vulnerability
DB-GPT Arbitrary File Write vulnerability
▾ Midnightdbgpt · dbgptEPSS 1.1%via OSV
CVE-2024-10835Critical· 9.1DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
▾ Midnightdbgpt · dbgptEPSS 1.2%via OSV
CVE-2024-10830High· 8.2DB-GPT Path Traversal vulnerability
DB-GPT Path Traversal vulnerability
▾ Twilightdbgpt · dbgptEPSS 0.73%via OSV
CVE-2024-10829High· 7.5PoCDB-GPT Uncontrolled Resource Consumption vulnerability
DB-GPT Uncontrolled Resource Consumption vulnerability
▾ Midnightdbgpt · dbgptEPSS 0.73%via OSV
CVE-2024-10906High· 7.1DB-GPT vulnerable to Cross-Site Request Forgery
DB-GPT vulnerable to Cross-Site Request Forgery
▾ Twilightdbgpt · dbgptEPSS 0.25%via OSV