Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-10902
CVE-2024-10902:
Python vulnerability analysis and mitigation
Overview
In eosphoros-ai/db-gpt version v0.6.0, a critical vulnerability was identified in the web API POST /v1/personal/agent/upload endpoint. The vulnerability (CVE-2024-10902) was discovered and disclosed on March 20, 2025, affecting the file upload functionality of the DB-GPT system (NVD).
Technical details
The vulnerability is classified as an Arbitrary File Upload with Path Traversal issue. The affected endpoint lacks proper validation of user-supplied data, allowing unauthorized attackers to upload arbitrary files to any location in the victim's file system. The vulnerability has received a CVSS v3.0 base score of 9.1 (CRITICAL) with the vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, indicating high severity with network accessibility and no required privileges or user interaction (NVD, Huntr).
Impact
The vulnerability's impact is severe as it enables potential remote code execution (RCE) capabilities. Attackers can write malicious files to critical system locations, such as placing a malicious __init__.py file in the Python's /site-packages/ directory, which could lead to code execution in the context of the application (NVD).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management