SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.
CVSS
No CVSS.
References
Configurations
No configuration.
History
22 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-22 20:15
Updated : 2025-07-22 20:15
NVD link : CVE-2025-51458
Mitre link : CVE-2025-51458
JSON object : View
Products Affected
No product.
CWE
No CWE.