Threats tagged 'ghsa-hhw5-29f6-hf4x'

Dbgpt version 0.6.0 has an absolute path traversal vulnerability in its file upload endpoint. This flaw allows attackers to upload files to arbitrary locations on the server by manipulating user-controllable parameters. Exploitation can lead to overwriting critical system files, such as SSH keys, enabling further compromise. The vulnerability is critical with a CVSS score of 9.1. No official patch or fix information is provided.