Lucene search
@huntr_aiCVELIST:CVE-2023-6831HistoryDec 15, 2023 - 12:00 a.m.
CVE-2023-6831 Path Traversal: '\..\filename' in mlflow/mlflow
2023-12-1500:00:31
CWE-29
@huntr_ai
www.cve.org
path traversal
cve-2023-6831
github
mlflow
security
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.002 Low
EPSS
Percentile
59.1%
Path Traversal: ‘..\filename’ in GitHub repository mlflow/mlflow prior to 2.9.2.
CNA Affected
[
{
"vendor": "mlflow",
"product": "mlflow/mlflow",
"versions": [
{
"version": "unspecified",
"lessThan": "2.9.2",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
nuclei
nuclei
mlflow - Path Traversal
2024-02-05 03:38:11
veracode
veracode
Path Traversal
2023-12-18 07:50:20
osv
osv
Path traversal in MLflow
2023-12-15 03:30:18
PYSEC-2023-253
2023-12-15 01:15:00
BIT-mlflow-2023-6831
2024-03-06 10:57:09
github
github
Path traversal in MLflow
2023-12-15 03:30:18
mlflow vulnerable to Path Traversal
2024-04-16 00:30:33
cve
cve
CVE-2023-6831
2023-12-15 01:15:08
CVE-2024-1560
2024-04-16 00:15:08
nvd
nvd
CVE-2023-6831
2023-12-15 01:15:08
CVE-2024-1560
2024-04-16 00:15:08
prion
prion
Path traversal
2023-12-15 01:15:00
cvelist
cvelist
CVE-2024-1560 Path Traversal Vulnerability in mlflow/mlflow
2024-04-16 00:00:13
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.002 Low
EPSS
Percentile
59.1%
Related for CVELIST:CVE-2023-6831