Lucene search
@huntr_aiCVE-2023-6976HistoryDec 20, 2023 - 6:15 a.m.
CVE-2023-6976
2023-12-2006:15:45
CWE-434
@huntr_ai
web.nvd.nist.gov
13
vulnerability
file write
server process
security
nvd
cve-2023-6976
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
19.3%
This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.
Affected configurations
Node
lfprojectsmlflowRange<2.9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lfprojects | mlflow | * | cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "mlflow",
"product": "mlflow/mlflow",
"versions": [
{
"version": "unspecified",
"lessThan": "2.9.2",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2023-12-20 06:15:00
nvd
nvd
CVE-2023-6976
2023-12-20 06:15:45
cvelist
cvelist
CVE-2023-6976 Unrestricted Upload of File with Dangerous Type
2023-12-20 05:30:08
osv
osv
BIT-mlflow-2023-6976
2024-03-06 10:56:16
MLflow Path Traversal Vulnerability
2023-12-20 06:30:25
CVE-2023-6976
2023-12-20 06:15:45
github
github
MLflow Path Traversal Vulnerability
2023-12-20 06:30:25
veracode
veracode
Arbitrary File Write
2023-12-21 07:10:16
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
19.3%
Related for CVE-2023-6976