CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.2. See the original NVD description below for full technical details.
CVE
CVE-2024-10830
Severity
HIGH
CVSS
8.2
EPSS
0.67%
Original NVD Description
A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. This vulnerability allows an attacker to delete any file on the server by manipulating the `file_key` parameter. The `file_key` parameter is not properly sanitized, enabling an attacker to specify arbitrary file paths. If the specified file exists, the application will delete it.
Related CVEs
Other vulnerabilities affecting the same vendor(s)