CVE-2024-10831 Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt

In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the filekey and docfile.filename parameters are...

CVE-2024-8019 Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

CVE-2024-8019

Lightning AI PyTorch Lightning 2.3.2 exposes a vulnerable LightningApp on Windows via /api/v1/upload_file/. An attacker can write/overwrite arbitrary files by crafting a filename, potentially enabling remote code execution (RCE) and compromising integrity and availability (CVSS 3.1/3.0: 9.1). Aff...

SuperAGI 路径遍历漏洞

SuperAGI is an open source infrastructure application from SuperAGI Open Source. It is used to build components, tools, frameworks and models to implement open source AGI. A path traversal vulnerability exists in SuperAGI version 0.0.14, which stems from path traversal in the file upload...

Aim 安全漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. A security vulnerability exists in Aim version 3.19.3, which stems from an unvalidated path to the tarfile.extractall function and could lead to arbitrary file extraction and overwriting...

PT-2025-12174

Name of the Vulnerable Software and Affected Versions open-webui version 0.3.8 Description The issue arises from the improper handling of user-supplied filenames in the /models/upload endpoint, specifically due to the usage of file path = f"UPLOAD DIR/file.filename" without proper input validatio...

CVE-2024-7776: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...

PT-2025-12197

Name of the Vulnerable Software and Affected Versions danswer-ai/danswer versions prior to the fixed version Description An arbitrary file overwrite issue exists in the ZulipConnector, arising from the load credentials method. This method uses user-controlled input for realm name and zuliprc...

Danswer 安全漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. Danswer suffers from a security vulnerability that stems from an arbitrary file overwrite that could lead to file system tampering...

PT-2025-12240

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description The issue arises from the /99/Models/name/json endpoint, which allows for arbitrary file overwrite on the target server. This is due to the exportModelDetails function in ModelsHandler.java, where the...

DB-GPT 安全漏洞

DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A security vulnerability exists in DB-GPT version 0.6.0, which stems from an absolute path traversal vulnerability in the file upload endpoint, which allows an attacker to upload any file...

PT-2025-12192

Name of the Vulnerable Software and Affected Versions onnx/onnx framework version 1.16.1 and earlier Description A vulnerability in the download model function of the onnx/onnx framework allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar...

PT-2025-12161

Name of the Vulnerable Software and Affected Versions stitutionai/devika version beacf6edaa205a5a5370525407a6db45137873b3 Description A path traversal issue exists in the project creation functionality, where the project name is not validated. This allows an attacker to create a project with a...

CVE-2024-6854: Absolute Path Traversal

In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a...

PT-2025-12204

Name of the Vulnerable Software and Affected Versions lightning-ai/pytorch-lightning version 2.3.2 Description A vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload file/ endpoint, allowing an attacker to write or overwrite...

PT-2025-12172

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description The issue allows an attacker to encrypt any files on the target server with a key of their choosing through an endpoint exposing a custom EncryptionTool. This can result in ransomware-like behavior, makin...

CVE-2024-7957: Path Traversal: '\..\filename'

An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the loadcredentials method, where user-controlled input for realmname and zuliprccontent is used to construct file paths and write file content...

H2O Vulnerable to Arbitrary File Overwrite

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...

H2O Vulnerable to Arbitrary File Overwrite via File Export

In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a...

CVE-2024-8616: External Control of File Name or Path

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...