CVE-2023-1177

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

Mlflow path traversal vulnerability

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow versions prior to 2.2.1 that stems from the presence of a path traversal vulnerability...

CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-1177: Path Traversal: '\..\filename'

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

a2 (>=0.1.0, <=0.3.17), agentos (>=0.0.5, <=0.0.7) +143 more potentially affected by CVE-2023-1177 via mlflow (>=0.8.2, <=2.1.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =3.0.0, =0.3.5, =0.8.0, =0.8.0, =0.14.18rc5, =0.6.1rc1, =0.6.1 - databricks-session 0.1.9 and more Source cves: CVE-2023-1177 Source advisory: MEND:CVE-2023-1177...

CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-1176

The CVE affects the open source MLflow project mlflow/mlflow prior to version 2.2.2 (ABSOLUTE PATH TRAVERSAL). Documented in multiple sources, the vulnerability allows an attacker to traverse the filesystem to access arbitrary files on the host via the mlflow server/ui workflow (attack vector: LO...

a2 (>=0.1.0, <=0.3.17), agentos (>=0.0.5, <=0.0.7) +143 more potentially affected by CVE-2023-1176 via mlflow (>=0.8.2, <=2.1.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =3.0.0, =0.3.5, =0.8.0, =0.8.0, =0.14.18rc5, =0.6.1rc1, =0.6.1 - databricks-session 0.1.9 and more Source cves: CVE-2023-1176 Source advisory: MEND:CVE-2023-1176...

CVE-2023-1177

CVE-2023-1177 is a path traversal / local-file-inclusion vulnerability in mlflow/mlflow prior to 2.2.1. Affects the MLflow server endpoints handling model-versions and artifacts (e.g., GET /model-versions/get-artifact) where a crafted path can disclose files outside the intended directory. Concre...

CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

Blind LFI in register-model/get?name=

Description A blind LFI exists in /ajax-api/2.0/mlflow/registered-models/get?name= The response from the server is different depending on if the file exists on the local file system or not. When the arbitrary local file exists, the server responds with 500 INTERNAL SERVER ERROR and when it doesn'...

LFI/RFI in MLflow

Description Local and Remote File Include in MLflow Proof of Concept Start the server or UI it works on both identically bash mlflow ui --host 127.0.0.1:5001 Create a model bash curl -i -s -k -X $'POST' \ -H $'Host: 127.0.0.1:5001' -H $'User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15;...

Information Disclosure

mlflow is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in the tempfile.mktemp' function in fileutils.pyfile allows to create same name temporary files in a different process...

azureml-contrib-run (>=1.0.18.2, <=1.0.21.1) potentially affected by CVE-2022-0736 via mlflow (0.8.2)

mlflow PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.18.2, =1.0.21.1 Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

agentos (>=0.0.5, <=0.0.7), autorad (0.1.2) +53 more potentially affected by CVE-2022-0736 via mlflow (>=1.0.0, <=1.23.0)

mlflow PYPI version =1.0.0, =0.0.5, =1.0.72, =1.0.72.1, =1.4.0, =3.0.0, =0.25.14, =0.1.3, =0.0.8, =0.0.1, =0.1.0, =0.4.5, =0.3.0, =1.3.0 and more Source cves: CVE-2022-0736 Source advisory: GHSA-VQJ2-4V8M-8VRQ...

azureml-contrib-run (>=1.0.23, <=1.0.30.1) potentially affected by CVE-2022-0736 via mlflow (0.9.0)

mlflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.23, =1.0.30.1 Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

azureml-contrib-run (>=1.0.33, <=1.0.41), azureml-mlflow (1.0.41) potentially affected by CVE-2022-0736 via mlflow (0.9.1)

mlflow PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.33, =1.0.41 - azureml-mlflow 1.0.41 Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

Insecure Temporary File in mlflow

mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp is deprecated and mkstemp should be used instead...

agentos (>=0.0.5, <=0.0.7), autorad (0.1.2) +53 more potentially affected by CVE-2022-0736 via mlflow (>=1.0.0, <=1.23.0)

mlflow PYPI version =1.0.0, =0.0.5, =1.0.72, =1.0.72.1, =1.4.0, =3.0.0, =0.25.14, =0.1.3, =0.0.8, =0.0.1, =0.1.0, =0.4.5, =0.3.0, =1.3.0 and more Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

GHSA-VQJ2-4V8M-8VRQ Insecure Temporary File in mlflow

mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp is deprecated and mkstemp should be used instead...