Lucene search
GitHub Advisory DatabaseGHSA-554W-XH4J-8W64HistoryDec 15, 2023 - 3:30 a.m.
Path traversal in MLflow
2023-12-1503:30:18
CWE-22
CWE-29
GitHub Advisory Database
github.com
11
path traversal
github
mlflow
security issue
software vulnerability
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.1%
Path Traversal: ‘..\filename’ in GitHub repository mlflow/mlflow prior to 2.9.2.
Affected configurations
Node
lfprojectsmlflowRange<2.9.2
Related
nuclei
nuclei
mlflow - Path Traversal
2024-02-05 03:38:11
veracode
veracode
Path Traversal
2023-12-18 07:50:20
osv
osv
Path traversal in MLflow
2023-12-15 03:30:18
PYSEC-2023-253
2023-12-15 01:15:00
BIT-mlflow-2023-6831
2024-03-06 10:57:09
cve
cve
CVE-2023-6831
2023-12-15 01:15:08
CVE-2024-1560
2024-04-16 00:15:08
nvd
nvd
CVE-2023-6831
2023-12-15 01:15:08
CVE-2024-1560
2024-04-16 00:15:08
prion
prion
Path traversal
2023-12-15 01:15:00
cvelist
cvelist
CVE-2023-6831 Path Traversal: '\..\filename' in mlflow/mlflow
2023-12-15 00:00:31
CVE-2024-1560 Path Traversal Vulnerability in mlflow/mlflow
2024-04-16 00:00:13
github
github
mlflow vulnerable to Path Traversal
2024-04-16 00:30:33
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.1%
Related for GHSA-554W-XH4J-8W64