Lucene search

K
cvelistMitreCVELIST:CVE-2023-30172
HistoryMay 11, 2023 - 12:00 a.m.

CVE-2023-30172

2023-05-1100:00:00
mitre
www.cve.org
3
directory traversal
mlflow
v2.0.1
get-artifact
api method
path parameter
arbitrary files
server

EPSS

0.001

Percentile

44.0%

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

EPSS

0.001

Percentile

44.0%

Related for CVELIST:CVE-2023-30172