Directory Traversal Vulnerability in DbGate Database Manager
CVE-2025-50184

7.1HIGH

Key Information:

Vendor

Dbgate

Status
Dbgate
Vendor
CVE Published:
26 July 2025

What is CVE-2025-50184?

DbGate, a cross-platform database manager, contains a directory traversal flaw that affects its file upload handling. Inversions prior to 6.4.3-beta.8, the 'file' parameter lacks adequate restrictions to the designated uploads directory. This allows attackers to manipulate the file listing endpoint to access arbitrary files on the server. By providing a specially crafted file path, an attacker can potentially read sensitive files outside the intended upload directory, risking exposure of critical system-level information.

Affected Version(s)

dbgate < 6.4.3-beta.8

References

https://github.com/dbgate/dbgate/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/dbgate/dbgate/commit/18b11df672b5a887b...
x_refsource_MISC

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-50184 : Directory Traversal Vulnerability in DbGate Database Manager