Relative Path Traversal

🗓️ 24 Mar 2025 05:53:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

mlflow vulnerable to Relative Path Traversal allows arbitrary file reads via improper URL handling.

Reporter	Title	Published	Views	Family All 17
CNNVD	MLflow 安全漏洞	20 Mar 202500:00	–	cnnvd
CVE	CVE-2024-8859	20 Mar 202510:09	–	cve
Cvelist	CVE-2024-8859 Path Traversal in mlflow/mlflow	20 Mar 202510:09	–	cvelist
Github Security Blog	MLflow has a Local File Read/Path Traversal in dbfs	20 Mar 202512:32	–	github
Nuclei	Mlflow < 2.17.0 - Local File Inclusion	23 Jul 202603:49	–	nuclei
NVD	CVE-2024-8859	20 Mar 202510:15	–	nvd
OSV	BIT-MLFLOW-2024-8859 Path Traversal in mlflow/mlflow	6 Aug 202505:45	–	osv
OSV	CVE-2024-8859 Path Traversal in mlflow/mlflow	20 Mar 202510:09	–	osv
OSV	GHSA-4RQF-8PFM-P36R MLflow has a Local File Read/Path Traversal in dbfs	20 Mar 202512:32	–	osv
OSV	PYSEC-2026-1638 MLflow has a Local File Read/Path Traversal in dbfs	7 Jul 202614:34	–	osv

Vulners

Node

mlflow mlflowRange2.3.1–2.16.2python

mlflow mlflowMatch0.0.1python

mlflow mlflowMatch0.1.0python

mlflow mlflowMatch0.2.0python

mlflow mlflowMatch0.2.1python

mlflow mlflowMatch0.3.0python

mlflow mlflowMatch0.4.0python

mlflow mlflowMatch0.4.1python

mlflow mlflowMatch0.4.2python

mlflow mlflowMatch0.5.0python

mlflow mlflowMatch0.5.1python

mlflow mlflowMatch0.5.2python

mlflow mlflowMatch0.6.0python

mlflow mlflowMatch0.7.0python

mlflow mlflowMatch0.8.0python

mlflow mlflowMatch0.8.1python

mlflow mlflowMatch0.8.2python

mlflow mlflowMatch0.9.0python

mlflow mlflowMatch0.9.0.1python

mlflow mlflowMatch0.9.1python

mlflow mlflowMatch1.0.0python

mlflow mlflowMatch1.1.0python

mlflow mlflowMatch1.1.1.dev0python

mlflow mlflowMatch1.10.0python

mlflow mlflowMatch1.11.0python

mlflow mlflowMatch1.12.0python

mlflow mlflowMatch1.12.1python

mlflow mlflowMatch1.13python

mlflow mlflowMatch1.13.1python

mlflow mlflowMatch1.14.0python

mlflow mlflowMatch1.14.1python

mlflow mlflowMatch1.15.0python

mlflow mlflowMatch1.16.0python

mlflow mlflowMatch1.17.0python

mlflow mlflowMatch1.18.0python

mlflow mlflowMatch1.19.0python

mlflow mlflowMatch1.2.0python

mlflow mlflowMatch1.20.0python

mlflow mlflowMatch1.20.1python

mlflow mlflowMatch1.20.2python

mlflow mlflowMatch1.21.0python

mlflow mlflowMatch1.22.0python

mlflow mlflowMatch1.23.0python

mlflow mlflowMatch1.23.1python

mlflow mlflowMatch1.24.0python

mlflow mlflowMatch1.25.0python

mlflow mlflowMatch1.25.1python

mlflow mlflowMatch1.26.0python

mlflow mlflowMatch1.26.1python

mlflow mlflowMatch1.27.0python

mlflow mlflowMatch1.28.0python

mlflow mlflowMatch1.29.0python

mlflow mlflowMatch1.3.0python

mlflow mlflowMatch1.30.0python

mlflow mlflowMatch1.30.1python

mlflow mlflowMatch1.4.0python

mlflow mlflowMatch1.5.0python

mlflow mlflowMatch1.6.0python

mlflow mlflowMatch1.7.0python

mlflow mlflowMatch1.7.1python

mlflow mlflowMatch1.7.2python

mlflow mlflowMatch1.8.0python

mlflow mlflowMatch1.9.0python

mlflow mlflowMatch1.9.1python

mlflow mlflowMatch2.0.0python

mlflow mlflowMatch2.0.0rc0python

mlflow mlflowMatch2.0.1python

mlflow mlflowMatch2.1.0python

mlflow mlflowMatch2.1.1python

mlflow mlflowMatch2.10.0python

mlflow mlflowMatch2.10.1python

mlflow mlflowMatch2.10.2python

mlflow mlflowMatch2.11.0python

mlflow mlflowMatch2.11.1python

mlflow mlflowMatch2.11.2python

mlflow mlflowMatch2.11.3python

mlflow mlflowMatch2.11.4python

mlflow mlflowMatch2.12.0python

mlflow mlflowMatch2.12.1python

mlflow mlflowMatch2.12.2python

mlflow mlflowMatch2.13.0python

mlflow mlflowMatch2.13.1python

mlflow mlflowMatch2.13.2python

mlflow mlflowMatch2.14.0python

mlflow mlflowMatch2.14.0rc0python

mlflow mlflowMatch2.14.1python

mlflow mlflowMatch2.14.2python

mlflow mlflowMatch2.14.2.dev0python

mlflow mlflowMatch2.14.3python

mlflow mlflowMatch2.15.0python

mlflow mlflowMatch2.15.0rc0python

mlflow mlflowMatch2.15.1python

mlflow mlflowMatch2.16.0python

mlflow mlflowMatch2.16.1python

mlflow mlflowMatch2.2.0python

mlflow mlflowMatch2.2.1python

mlflow mlflowMatch2.2.2python

mlflow mlflowMatch2.3.0python

mlflow mlflowMatch2.3.1python

mlflow mlflowMatch2.3.2python

mlflow mlflowMatch2.4.0python

mlflow mlflowMatch2.4.1python

mlflow mlflowMatch2.4.2python

mlflow mlflowMatch2.5.0python

mlflow mlflowMatch2.6.0python

mlflow mlflowMatch2.7.0python

mlflow mlflowMatch2.7.1python

mlflow mlflowMatch2.8.0python

mlflow mlflowMatch2.8.1python

mlflow mlflowMatch2.9.0python

mlflow mlflowMatch2.9.1python

mlflow mlflowMatch2.9.2python

Source	Link
github	www.github.com/mlflow/mlflow/commit/7791b8cdd595f21b5f179c7b17e4b5eb5cbbe654
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8859
huntr	www.huntr.com/bounties/2259b88b-a0c6-4c7c-b434-6aacf6056dcb
github	www.github.com/mlflow/mlflow

13 Dec 2025 07:21Current

7High risk

Vulners AI Score7

CVSS 37.5

EPSS0.02484

SSVC