Threats tagged 'ghsa-pjc5-qj93-h7m2'

DB-GPT version 0.8.0 contains a directory traversal vulnerability in the skill_upload functionality. This flaw allows a remote attacker to write files outside the intended workspace or storage boundary, potentially leading to unauthorized file manipulation. The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.