by Kastro
Paper/Archive/CVE-2023-1177

CVE-2023-1177

mlflow mlflow/mlflow — Path Traversal: '\..\filename' in mlflow/mlflow

EPSS 70%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.4.994 × 2019.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

Affected

ProductAffectedFixed inSource
mlflow/mlflowunspecified – < 2.2.12.2.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntrdev (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28refgithub.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e