CVE-2025-6283

MEDIUM EPSS 44.2%
Published Jun 19, 20251y ago · Modified Jun 17, 20261w ago
5.1 CVSS 4.0
Medium
Find Similar
Published Jun 19, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component.

CVSS Details

Base Score
5.1
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
44.2% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

VendorProductVersionRange
xataagent* <0.3.1

References 7

  • github.com https://github.com/xataio/agent/commit/03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc
    Patch
  • github.com https://github.com/xataio/agent/issues/179
    ExploitIssue TrackingPatch
  • github.com https://github.com/xataio/agent/pull/191
    Issue TrackingPatch
  • github.com https://github.com/xataio/agent/releases/tag/v0.3.1
    Release Notes
  • vuldb.com https://vuldb.com/?ctiid.313287
    Permissions RequiredVDB Entry
  • vuldb.com https://vuldb.com/?id.313287
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.593627
    Third Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/xataio/agent/commit/03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc
    Patch
  • github.com https://github.com/xataio/agent/issues/179
    ExploitIssue TrackingPatch
  • github.com https://github.com/xataio/agent/pull/191
    Issue TrackingPatch