Product by Eosphoros-ai
Eosphoros-ai/db-gpt
10 known vulnerabilities in Eosphoros-ai/db-gpt (Eosphoros-ai), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-10902 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10835 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10901 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10833 | Arbitrary File Write in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10831 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt | 9.1 | |
| Critical | CVE-2024-10834 | Arbitrary File Write in eosphoros-ai/db-gpt | 9.1 | |
| High | CVE-2024-10830 | Path Traversal in eosphoros-ai/db-gpt | 8.2 | |
| High | CVE-2024-10829 | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt | 7.5 | |
| High | CVE-2025-0452 | Arbitrary File Deletion in eosphoros-ai/DB-GPT | 8.2 | |
| High | CVE-2024-10906 | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt | 7.1 |