CVE-2024-10834
Arbitrary File Write in eosphoros-ai/db-gpt
概要
Arbitrary File Write in eosphoros-ai/db-gpt
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to os.path.join, enabling an attacker to write files to arbitrary locations on the target server. This vulnerability can be exploited by setting the doc_file.filename to an absolute path, which can lead to overwriting system files or creating new SSH-key entries.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web huntr.com