PT-2023-30766 · Unknown · Torchserve
Msaroufim
·
Published
2023-11-21
·
Updated
2023-11-29
·
CVE-2023-48299
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
TorchServe versions 0.1.0 through 0.9.0
Description
The issue allows uploading potentially harmful archives that contain files extracted to any location on the filesystem within the process permissions, using the model/workflow management API. This could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running TorchServe. The ZipSlip issue has been fixed by validating the paths of files contained within a zip archive before extracting them.
Recommendations
For TorchServe versions 0.1.0 through 0.9.0, update to TorchServe release 0.9.0 or later, which includes fixes to address the ZipSlip vulnerability. As a temporary workaround, consider validating the paths of files contained within a zip archive before extracting them to prevent potentially harmful files from being uploaded. Restrict access to the model/workflow management API to minimize the risk of exploitation.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Torchserve