PT-2023-30766 · Unknown · Torchserve
Msaroufim
·
Publicado
2023-11-21
·
Atualizado
2023-11-29
·
CVE-2023-48299
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
TorchServe versions 0.1.0 through 0.9.0
Description
The issue allows uploading potentially harmful archives that contain files extracted to any location on the filesystem within the process permissions, using the model/workflow management API. This could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running TorchServe. The ZipSlip issue has been fixed by validating the paths of files contained within a zip archive before extracting them.
Recommendations
For TorchServe versions 0.1.0 through 0.9.0, update to TorchServe release 0.9.0 or later, which includes fixes to address the ZipSlip vulnerability. As a temporary workaround, consider validating the paths of files contained within a zip archive before extracting them to prevent potentially harmful files from being uploaded. Restrict access to the model/workflow management API to minimize the risk of exploitation.
Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Torchserve