Arbitrary File Read Access Vulnerability in mlflow/mlflow
CVE-2024-1558

7.5HIGH

Key Information:

Vendor

Mlflow

Status
Mlflow/mlflow
Vendor
CVE Published:
16 April 2024

What is CVE-2024-1558?

A path traversal vulnerability exists in the _create_model_version() function within server/handlers.py of the MLflow repository, caused by inadequate validation of the source parameter. This flaw enables attackers to exploit crafted source input, circumventing the _validate_non_local_source_contains_relative_paths(source) function's checks. As a result, unauthorized access to arbitrary files on the server can occur, exposing sensitive data while interacting with the /model-versions/get-artifact handler. Proper security measures and updates are required to mitigate this risk.

Affected Version(s)

mlflow/mlflow <= unspecified

References

https://huntr.com/bounties/7f4dbcc5-b6b3-43dd-b310-e2d055...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.