CVE-2025-51459

Mô tả

Tham khảo

• eosphoros-ai/DB-GPT#2649 · Exploit
• gecko.security/blog/cve-2025-51459 · Exploit

Lỗ hổng khác của db-gpt

• CVE-2025-51458TRUNG BÌNH 6.5SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via cr…
• CVE-2025-6772CAO 7.5A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of th…
• CVE-2025-0452CAO 8.2eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The …
• CVE-2024-10906CAO 8.1In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` …
• CVE-2024-10902NGHIÊM TRỌNG 9.8In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Travers…