EUVD-2024-17679

Malicious code in bioql PyPI...

CVE-2024-1961: Improper Limitation of a Pathname to a Restricted Directory

vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the 'artifactpath' parameter. This flaw...