CVE-2024-10834: Arbitrary File Write in eosphoros-ai/db-gpt
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to os.path.join, enabling an attacker to write files to arbitrary locations on the target server. This vulnerability can be exploited by setting the docfile.filename to an absolute path, which can lead to overwriting system files or creating new SSH-key entries.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10834?
CVE-2024-10834 is classified with a high severity due to its potential for arbitrary file write vulnerabilities.
How do I fix CVE-2024-10834?
To fix CVE-2024-10834, update to a patched version of eosphoros-ai/db-gpt that addresses the vulnerabilities in the RAG-knowledge endpoint.
What types of attacks can CVE-2024-10834 facilitate?
CVE-2024-10834 can facilitate attacks that allow an attacker to write arbitrary files to sensitive locations on the server.
Which versions of eosphoros-ai/db-gpt are affected by CVE-2024-10834?
CVE-2024-10834 affects eosphoros-ai/db-gpt version 0.6.0.
How does CVE-2024-10834 allow for arbitrary file write?
CVE-2024-10834 allows for arbitrary file write by permitting an attacker to pass an absolute path to the `os.path.join` function.