CVE-2023-6023 (published 2023-11-16T16:03:08.827Z)
An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
Affected products: Vendor: vertaai
Product: vertaai/modeldb
Versions: unspecified