CVE-2025-50184 - CVE House
Back to Database
Status published High CVE-2025-50184

DbGate allows for File Traversal via file parameter

Vulnerability Description

DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. The file parameter is not properly restricted to the intended uploads directory. As a result, the endpoint that lists files within the upload directory can be manipulated to access arbitrary files on the system. By supplying a crafted path to the file parameter, an attacker can read files outside the upload directory, potentially exposing sensitive system-level data. This is fixed in version 6.4.3-beta.8.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-50184

Credits & Attribution

No credits recorded in the NVD database.

References

More from dbgate

View All →
CVE-2025-50185
DbGate allows Unauthorized File Access via CSV Plugin
High 7

Affected Vendor

Affected Software

dbgate
Vulnerable Versions:
< 6.4.3-beta.8

Timeline

Official Publish: July 26th, 2025
Last Modified: July 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-29

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.