Path Traversal

mlflow is vulnerable to Path Traversal. The vulnerability is caused due to an inappropriate handling of path validation in ftp artifact repository, located within ftpartifactrepo.py. This allows an attacker to perform remote code execution and retrieve data & model information...