eosphoros-ai DB-GPT.

eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine

• eosphoros-ai DB-GPT
• Code injection
• CWE-791

eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere

• eosphoros-ai DB-GPT
• CWE-829

eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection

• eosphoros-ai DB-GPT
• Other injection
• Code injection

DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

• eosphoros-ai DB-GPT
• CWE-1392

DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

• eosphoros-ai DB-GPT
• Authentication bypass

DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

• eosphoros-ai DB-GPT
• Path traversal

DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

• eosphoros-ai DB-GPT
• Path traversal

eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload

• eosphoros-ai DB-GPT
• Broken access control
• Unrestricted file upload

eosphoros-ai db-gpt Incomplete Fix editor sql injection

• eosphoros-ai db-gpt
• Other injection
• SQL injection

eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection

• eosphoros-ai db-gpt
• Other injection
• Code injection

eosphoros-ai db-gpt import import_flow path traversal

• eosphoros-ai db-gpt
• Path traversal

Arbitrary File Write in eosphoros-ai/db-gpt

• eosphoros-ai/db-gpt
• Path traversal

Arbitrary File Deletion in eosphoros-ai/DB-GPT

• eosphoros-ai/db-gpt
• Path traversal