CVE-2024-10834
Arbitrary File Write in eosphoros-ai/db-gpt
Summary
Arbitrary File Write in eosphoros-ai/db-gpt
Original description
The description as published by the source.
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to os.path.join, enabling an attacker to write files to arbitrary locations on the target server. This vulnerability can be exploited by setting the doc_file.filename to an absolute path, which can lead to overwriting system files or creating new SSH-key entries.
References
- advisory github.com
- advisory nvd.nist.gov
- web huntr.com