CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

RedhatCVE•added 2025/07/24 12:23 a.m.•8 views

CVE-2025-51459

File Upload vulnerability in agent.hub.controller.refreshplugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with pluginhub.sanitizefilename and pluginsutil.scanplugi...

6.5CVSS7.6AI score0.00346EPSS

Exploits1References1

Circl•added 2025/07/22 9:11 p.m.•15 views

CVE-2025-51459

creationtimestamp| type| source ---|---|--- 2025-07-22 21:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulg6kslm52h 2026-02-20 07:14:31+00:00| seen| https://gist.github.com/YLChen-007/b4869d6d384d6471ec1e67320f40aa41 2026-02-20 09:09:19+00:00| seen|...

6.5CVSS5.1AI score0.00346EPSS

Exploits1References3

NVD•added 2025/07/22 7:15 p.m.•9 views

CVE-2025-51459

6.5CVSS0.00346EPSS

Exploits1References2

OSV•added 2025/07/22 12:0 a.m.•5 views

CVE-2025-51459

6.5CVSS8AI score0.00346EPSS

Exploits1References4

CVE•added 2025/07/22 12:0 a.m.•21 views

CVE-2025-51459

CVE-2025-51459 concerns DB-GPT 0.7.0 where a file-upload vulnerability in agent.hub.controller.refresh_plugins allows remote code execution via uploading a crafted plugin ZIP to /v1/personal/agent/upload. The root cause involves interaction with plugin_hub._sanitize_filename and plugins_util.scan...

6.5CVSS8.2AI score0.00346EPSS

Exploits1References2Affected Software1