Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40639
HistoryMay 23, 2023 - 4:46 a.m.

Path Traversal

2023-05-2304:46:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
path traversal
mlflow
vulnerability
source urls
arbitrary files

0.03 Low

EPSS

Percentile

91.0%

mlflow is vulnerable to Path Traversal. The vulnerability exists because the library does not properly validate the source URLs, allowing an attacker to access files outside the expected directory and read arbitrary files through the relative path such as \\..\filename

CPENameOperatorVersion
mlflowle2.2.2
mlflowle2.2.2

0.03 Low

EPSS

Percentile

91.0%