DB-GPT Unconstrained File Upload Vulnerability

DB-GPT allows uploading files without properly constraining the destination path, leading to arbitrary file writes.

DB-GPT builds the destination path for an uploaded skill from the multipart filename without validating it against the upload directory. This allows an attacker to write files outside the intended directory, including Python modules, leading to remote code execution.