MLflow Path Traversal Vulnerability
This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6976US | high8.8 | — | ||
This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-wv8q-4f85-2p8pADVISORY
- https://github.com/mlflow/mlflowPACKAGE
- https://github.com/mlflow/mlflow/commit/5044878da0c1851ccfdd5c0a867157ed9a502fbcWEB
- https://huntr.com/bounties/2408a52b-f05b-4cac-9765-4f74bac3f20fWEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-6976ADVISORY
- https://pypi.org/project/mlflowPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan