https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:05:10 +0000 https://cve.radiocsirt.org/vuln/cve-2024-10902 <p><strong>Affected:</strong> eosphoros-ai/db-gpt</p> <p>In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim&#39;s file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python&#39;s `/site-packages/` directory.</p> <p><strong>Affected:</strong> eosphoros-ai/db-gpt</p> <p>In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim&#39;s file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python&#39;s `/site-packages/` directory.</p> https://cve.radiocsirt.org/vuln/cve-2024-10902