CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-1177

CVE-2023-1177 is a path traversal / local-file-inclusion vulnerability in mlflow/mlflow prior to 2.2.1. Affects the MLflow server endpoints handling model-versions and artifacts (e.g., GET /model-versions/get-artifact) where a crafted path can disclose files outside the intended directory. Concre...

Blind LFI in register-model/get?name=

Description A blind LFI exists in /ajax-api/2.0/mlflow/registered-models/get?name= The response from the server is different depending on if the file exists on the local file system or not. When the arbitrary local file exists, the server responds with 500 INTERNAL SERVER ERROR and when it doesn'...

LFI/RFI in MLflow

Description Local and Remote File Include in MLflow Proof of Concept Start the server or UI it works on both identically bash mlflow ui --host 127.0.0.1:5001 Create a model bash curl -i -s -k -X $'POST' \ -H $'Host: 127.0.0.1:5001' -H $'User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15;...

Information Disclosure

mlflow is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in the tempfile.mktemp' function in fileutils.pyfile allows to create same name temporary files in a different process...

autorad (=0.1.2), azureml-contrib-run (>=1.0.18.2 <=1.0.41) +48 more potentially affected by CVE-2022-0736 via mlflow (>=0.8.2 <=1.23.0)

mlflow PYPI version =0.8.2, =1.0.18.2, =1.4.0, =3.0.0, =0.0.4, =0.1.3, =0.0.8, =0.0.1, =0.4.5, =1.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

GHSA-VQJ2-4V8M-8VRQ Insecure Temporary File in mlflow

mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp is deprecated and mkstemp should be used instead...

Insecure Temporary File in mlflow

mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp is deprecated and mkstemp should be used instead...

CVE-2022-0736

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

CVE-2022-0736

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

PYSEC-2022-28

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

autorad (=0.1.2), azureml-contrib-run (>=1.0.18.2 <=1.0.41) +48 more potentially affected by CVE-2022-0736 via mlflow (>=0.8.2 <=1.23.0)

mlflow PYPI version =0.8.2, =1.0.18.2, =1.4.0, =3.0.0, =0.0.4, =0.1.3, =0.0.8, =0.0.1, =0.4.5, =1.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2022-0736 Source advisory: OSV:PYSEC-2022-28...

PYSEC-2022-28

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

CVE-2022-0736 Insecure Temporary File in mlflow/mlflow

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

CVE-2022-0736

CVE-2022-0736 affects mlflow/mlflow prior to 1.23.1, describing an insecure temporary file issue. The root cause is use of the deprecated tempfile.mktemp() pattern in the affected code, with remediation to upgrade to mlflow 1.23.1 or later as indicated by OSV/GHSA entries. The connected sources c...

CVE-2022-0736 Insecure Temporary File in mlflow/mlflow

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

Mlflow 安全漏洞

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow that stems from the product's tempfile.mktemp function failing to properly handle multi-process state. The vulnerability allows an attacker to create a temporary file with the same name. T...

PT-2022-13398 · Mlflow · Mlflow

Name of the Vulnerable Software and Affected Versions: mlflow versions prior to 1.23.1 Description: The issue is related to an insecure temporary file in the GitHub repository mlflow/mlflow. The tempfile.mktemp function is deprecated and should be replaced with mkstemp. Recommendations: For...

Insecure Temporary File in mlflow/mlflow

Description mlflow package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Impact Availability will get...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.chronon:aggregator_2.11 (>=0.0.1 <=thread_contention-0.0.23-dev3) +25285 more potentially affected by CVE-2020-36179 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0 <=2.9.10.7)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.7.0, =0.3.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.42.1, =0.42.1, =0.40.2, =0.42.1, =0.80.6 and more Source cves: CVE-2020-36179 Source advisory: OSV:GHSA-9GPH-22XH-8X98...