CVE-2024-10902
2 advisories.
PyPI/dbgpt CVE-2024-10902: critical 9.1, EPSS 1.31%
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3xq5-x4fj-rff7
- https://nvd.nist.gov/vuln/detail/CVE-2024-10902
- https://github.com/eosphoros-ai/DB-GPT
- https://huntr.com/bounties/f7fbf76e-aa1c-4106-b007-e9579f4f7d5f
CVE-2024-10902 · published · modified · JSON
PyPI/dbgpt CVE-2024-10902: critical 9.1, EPSS 1.31%
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-321
- https://nvd.nist.gov/vuln/detail/CVE-2024-10902
- https://github.com/eosphoros-ai/DB-GPT
- https://huntr.com/bounties/f7fbf76e-aa1c-4106-b007-e9579f4f7d5f
- https://pypi.org/project/dbgpt
- https://github.com/advisories/GHSA-3xq5-x4fj-rff7
CVE-2024-10902 · published · modified · JSON