CVE-2024-1558

🗓️ 16 Apr 2024 00:00:14Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

There is a path traversal vulnerability in the `_create_model_version()` function within `server/handlers.py` of the mlflow/mlflow repository, allowing for arbitrary file read access on the server

Reporter	Title	Published	Views	Family All 11
CNNVD	Mlflow 路径遍历漏洞	15 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-1558 Path Traversal Vulnerability in mlflow/mlflow	16 Apr 202400:00	–	cvelist
EUVD	EUVD-2024-1230	3 Oct 202520:07	–	euvd
Github Security Blog	mlflow vulnerable to Path Traversal	16 Apr 202400:30	–	github
NVD	CVE-2024-1558	16 Apr 202400:15	–	nvd
OSV	BIT-MLFLOW-2024-1558 Path Traversal Vulnerability in mlflow/mlflow	4 Feb 202507:22	–	osv
OSV	GHSA-J62R-WXQQ-F3GF mlflow vulnerable to Path Traversal	16 Apr 202400:30	–	osv
Positive Technologies	PT-2024-18129 · Mlflow · Mlflow	15 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1558	5 Feb 202505:35	–	redhatcve
Veracode	Path Traversal	18 Apr 202406:29	–	veracode

NVD

Vulnrichment

Node

lfprojects mlflowRange<2.12.1

[
  {
    "vendor": "mlflow",
    "product": "mlflow/mlflow",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/7f4dbcc5-b6b3-43dd-b310-e2d0556a8081

Parameter	Position	Path	Description	CWE
source	query param	/model-versions/get-artifact	Path traversal via source parameter leading to arbitrary file read on server during model artifact retrieval.	CWE-22

03 Feb 2025 15:14Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

CVSS 37.5

EPSS0.0009

SSVC

CWE-22