CVE-2026-101067: dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
No. The available CVSS data indicates that exploitation can be performed remotely without privileges and without user interaction.
How practical is exploitation likely to be?
The attack complexity is rated low, and a public exploit is available. This increases the likelihood that exposed instances could be targeted.
Is a vendor fix or workaround identified?
No fix or workaround is identified in the available information. The vendor was contacted before disclosure but did not provide a response.