Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:48 a.m.8 views

CVE-2023-6831

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

8.1CVSS6.7AI score0.0329EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2024/11/12 12:0 a.m.22 views

MLflow < 2.9.2 Path Traversal Vulnerability

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 Tenable, Inc. include'compat.inc'; if description scriptid210769;...

8.1CVSS8.2AI score0.0329EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2024/04/16 12:30 a.m.58 views

mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the deleteartifactmlflowartifacts handler and localfileuritopath function, allowing for...

8.1CVSS8AI score0.00856EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/15 12:0 a.m.34 views

CVE-2023-6831 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

8.1CVSS8.2AI score0.0329EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/15 12:0 a.m.26 views

CVE-2023-6831 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

8.1CVSS7.2AI score
SaveExploits0References4
Rows per page
Query Builder