CVE-2023-6831

Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Affected

mlflow · mlflow/mlflow

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS v3.0 HUNTR

8.1 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS v3.0 GitHub

10.0 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

EPSS

3.29% chance of exploitation in the next 30 days, 88th percentile

Nuclei

high

Published

2023-12-15

Updated

2024-08-02

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6831.yaml

Security advisories

• https://huntr.com/bounties/0acdd745-0167-4912-9d5c-02035fe5b314
• advisories/GHSA-554w-xh4j-8w64
• mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1

References

• CVE Record
• NVD entry