GitHub Advisoryadvisory · PyPI

GHSA-f82r-jj5r-6g97 mlflow Path Traversal vulnerability

HIGH Published 2024-04-16 Modified 2024-08-09 Official page ↗
Aliases
CVE-2024-1483
Ecosystem
PyPI
Packages
mlflow
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2024-04-16

Affected packages

• PyPI mlflow: < 2.12.1 → fixed in 2.12.1

Description

A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifact_location' and 'source' parameters, using a local URI with '#' instead of '?', an attacker can traverse the server's directory structure. The issue occurs due to insufficient validation of user-supplied input in the server's handlers.

Related

Alias · CVE (1)

  • CVE-2024-1483 A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References