Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/04/16 12:30 a.m.58 views

mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the deleteartifactmlflowartifacts handler and localfileuritopath function, allowing for...

8.1CVSS8AI score0.00856EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder