Product by Dbgpt
Db-gpt
13 known vulnerabilities in Db-gpt (Dbgpt), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-10902 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10835 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10901 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10833 | Arbitrary File Write in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10831 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10834 | Arbitrary File Write in eosphoros-ai/db-gpt | 9.1 | |
| High | CVE-2024-10830 | Path Traversal in eosphoros-ai/db-gpt | 8.2 | |
| High | CVE-2024-10829 | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt | 7.5 | |
| High | CVE-2025-6772 | eosphoros-ai db-gpt import import_flow path traversal | 7.3 | |
| High | CVE-2025-0452 | Arbitrary File Deletion in eosphoros-ai/DB-GPT | 8.2 | |
| Medium | CVE-2025-51459 | Db-gpt: Code Execution | 6.5 | |
| Medium | CVE-2025-51458 | Db-gpt: SQL Injection | 6.5 | |
| High | CVE-2024-10906 | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt | 7.1 |