CVE-2024-10906
2 advisories.
PyPI/dbgpt CVE-2024-10906: high 7.1, EPSS 0.25%
DB-GPT vulnerable to Cross-Site Request Forgery
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3248-f932-c76p
- https://nvd.nist.gov/vuln/detail/CVE-2024-10906
- https://github.com/eosphoros-ai/DB-GPT
- https://github.com/eosphoros-ai/DB-GPT/blob/f5de05b2636bc0628b3a92d32b22a26f88a18f2a/dbgpt/app/dbgpt_server.py#L240
- https://huntr.com/bounties/8864aca5-a342-4dab-b866-b2882ba6f160
CVE-2024-10906 · published · modified · JSON
PyPI/dbgpt CVE-2024-10906: high 7.1, EPSS 0.25%
DB-GPT vulnerable to Cross-Site Request Forgery
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1289
- https://nvd.nist.gov/vuln/detail/CVE-2024-10906
- https://github.com/eosphoros-ai/DB-GPT
- https://github.com/eosphoros-ai/DB-GPT/blob/f5de05b2636bc0628b3a92d32b22a26f88a18f2a/dbgpt/app/dbgpt_server.py#L240
- https://huntr.com/bounties/8864aca5-a342-4dab-b866-b2882ba6f160
- https://pypi.org/project/dbgpt
- https://github.com/advisories/GHSA-3248-f932-c76p
CVE-2024-10906 · published · modified · JSON