CVE-2024-10833
2 advisories.
PyPI/dbgpt CVE-2024-10833: critical 9.1
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Action: Upgrade dbgpt to 0.6.2 or later.
pip install dbgpt==0.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: GHSA-j9g7-mqhh-9hxf
- https://nvd.nist.gov/vuln/detail/CVE-2024-10833
- https://github.com/eosphoros-ai/DB-GPT/commit/780ce803e325b87f4ddfbe5824451e379aeee56c
- https://github.com/eosphoros-ai/DB-GPT
- https://huntr.com/bounties/dc58e981-e325-4c11-b4e1-1095890fd15a
CVE-2024-10833 · published · modified · JSON
PyPI/dbgpt CVE-2024-10833: critical 9.1
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Action: Upgrade dbgpt to 0.6.2 or later.
pip install dbgpt==0.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: PYSEC-2026-324
- https://nvd.nist.gov/vuln/detail/CVE-2024-10833
- https://github.com/eosphoros-ai/DB-GPT/commit/780ce803e325b87f4ddfbe5824451e379aeee56c
- https://github.com/eosphoros-ai/DB-GPT
- https://huntr.com/bounties/dc58e981-e325-4c11-b4e1-1095890fd15a
- https://pypi.org/project/dbgpt
- https://github.com/advisories/GHSA-j9g7-mqhh-9hxf
CVE-2024-10833 · published · modified · JSON