PT-2023-32782 · Mlflow · Mlflow

B-Step62 · Published 2023-12-14 · Updated 2024-03-06 · CVE-2023-6831

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions mlflow/mlflow versions prior to 2.9.2

Description The issue is related to a Path Traversal vulnerability, where the sequence '..filename' can be used to access files outside the intended directory. This vulnerability is present in the mlflow/mlflow GitHub repository.

Recommendations For versions prior to 2.9.2, update to version 2.9.2 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-29

CWE-22

Related Identifiers

BIT-MLFLOW-2023-6831

CVE-2023-6831

GHSA-554W-XH4J-8W64

PYSEC-2023-253

Affected Products

Mlflow

References · 14

• 🔥 https://huntr.com/bounties/0acdd745-0167-4912-9d5c-02035fe5b314 · Exploit
• https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1 · Patch
• https://osv.dev/vulnerability/GHSA-554w-xh4j-8w64 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6831 · Security Note
• https://osv.dev/vulnerability/BIT-mlflow-2023-6831 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6831 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2023-253 · Vendor Advisory
• https://github.com/mlflow/mlflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-253.yaml · Note
• https://twitter.com/Checkmarx/status/1737054350361456768 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1735550291225817403 · Twitter Post
• https://twitter.com/digital_const/status/1748863606110753015 · Twitter Post
• https://twitter.com/CVEnew/status/1735466416730501252 · Twitter Post
• https://t.me/cvenotify/71343 · Telegram Post