PT-2023-30766 · Unknown · Torchserve

Name of the Vulnerable Software and Affected Versions: TorchServe versions 0.1.0 through 0.9.0 Description: The issue allows uploading potentially harmful archives that contain files extracted to any location on the filesystem within the process permissions, using the model/workflow management AP...