by Kastro
Paper/Archive/CVE-2023-5245

CVE-2023-5245

JFROG — Using MLeap for loading a saved model (zip archive) can lead to path traversal/arbitrary file creation and possibly remote code execution.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 67.9.679 × 2013.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract(). Arbitrary file creation can directly lead to code execution

Affected

ProductAffectedFixed inSource
ml.combust.mleap.mleap-tensorflow0.18.0 – < 0.23.10.23.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JFROG (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

patchgithub.com/combust/mleap/pull/866#issuecomment-1738032225writeupresearch.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656