Path Traversal

mlflow is vulnerable to Path Traversal. The vulnerability exists due to the improper source validation in the validatesource function of handlers.py, which allows an attacker to access files outside the expected directory through relative paths...

Authorization Bypass

jupyterserver is vulnerable to authorization bypass. The vulnerability exists in filemanager.py and handlers.py functions because the hidden files and directories are not properly checked which allows an attacker to bypass and gain access to hidden files and modify sensitive information...