Lucene search
HistoryDec 15, 2023 - 1:15 a.m.
CVE-2023-6831
cve
2023
6831
path traversal
github
mlflow
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
7.9 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.0%
Path Traversal: ‘..\filename’ in GitHub repository mlflow/mlflow prior to 2.9.2.
Affected configurations
Node
lfprojectsmlflowRange<2.9.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| lfprojects:mlflow | lfprojects mlflow | lt | 2.9.2 |
CNA Affected
[
{
"vendor": "mlflow",
"product": "mlflow/mlflow",
"versions": [
{
"version": "unspecified",
"lessThan": "2.9.2",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
nuclei
nuclei
mlflow - Path Traversal
2024-02-05 03:38:11
veracode
veracode
Path Traversal
2023-12-18 07:50:20
osv
osv
Path traversal in MLflow
2023-12-15 03:30:18
PYSEC-2023-253
2023-12-15 01:15:00
BIT-mlflow-2023-6831
2024-03-06 10:57:09
github
github
Path traversal in MLflow
2023-12-15 03:30:18
mlflow vulnerable to Path Traversal
2024-04-16 00:30:33
prion
prion
Path traversal
2023-12-15 01:15:00
cvelist
cvelist
CVE-2023-6831 Path Traversal: '\..\filename' in mlflow/mlflow
2023-12-15 00:00:31
CVE-2024-1560 Path Traversal Vulnerability in mlflow/mlflow
2024-04-16 00:00:13
nvd
nvd
CVE-2023-6831
2023-12-15 01:15:08
CVE-2024-1560
2024-04-16 00:15:08
cve
cve
CVE-2024-1560
2024-04-16 00:15:08
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
7.9 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.0%
Related for CVE-2023-6831