Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40578
HistoryMay 18, 2023 - 2:26 a.m.

Path Traversal

2023-05-1802:26:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
mlflow
vulnerability
path traversal
unsanitized parameter
file access

EPSS

0.001

Percentile

44.0%

mlflow is vulnerable to Path Traversal. The vulnerability exists because the handlers.py does not properly sanitize the path parameter, which allows an attacker to access files outside the expected directory and read arbitrary files through the /get-artifact API endpoint.

EPSS

0.001

Percentile

44.0%

Related for VERACODE:40578