Beveiligingsadvies

CVE-2025-6772

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-27 18:31:05

Laatst bijgewerkt 2025-06-27 19:06:42

Toegewezen door VulDB

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

← Alle CVE's bekijken Bekijk op cve.org ↗