EUVD-2025-19420

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Critical vulnerability in eosphoros-ai db-gpt 0.7.2 allows remote path traversal attack.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6772	27 Jun 202518:51	–	circl
CNNVD	DB-GPT 路径遍历漏洞	27 Jun 202500:00	–	cnnvd
CVE	CVE-2025-6772	27 Jun 202518:31	–	cve
Cvelist	CVE-2025-6772 eosphoros-ai db-gpt import import_flow path traversal	27 Jun 202518:31	–	cvelist
NVD	CVE-2025-6772	27 Jun 202519:15	–	nvd
Positive Technologies	PT-2025-27251	27 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6772	29 Jun 202519:07	–	redhatcve
Snyk	Directory Traversal	27 Jun 202518:46	–	snyk
vulnersOsv	dbgpt-app (=0.8.0rc1), dbgpt-client (>=0.7.0 <=0.8.0rc1) +2 more potentially affected by CVE-2025-6772 via dbgpt (=0.8.0)	27 Jun 202518:46	–	vulnersosv
Vulnrichment	CVE-2025-6772 eosphoros-ai db-gpt import import_flow path traversal	27 Jun 202518:31	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "e9664c0b-5b02-3821-9b9a-0f60d44d24fc",
        "vendor": {
          "name": "eosphoros-ai"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1af3a975-1be4-32a9-98c7-3ae4674765f2",
        "product": {
          "name": "db-gpt"
        },
        "product_version": "0.7.1"
      },
      {
        "id": "8ab3cfc6-499d-3f62-8c3c-fb51035ed2da",
        "product": {
          "name": "db-gpt"
        },
        "product_version": "0.7.0"
      },
      {
        "id": "fbb8bc2f-22a6-3219-94ac-b93fa0c5a0fe",
        "product": {
          "name": "db-gpt"
        },
        "product_version": "0.7.2"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/eosphoros-ai/DB-GPT/issues/2774

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 46.9

CVSS 3.17.3 - 7.5

CVSS 27.5

CVSS 37.3

EPSS0.01465

SSVC