CVE-2023-2780
Assigner: @huntrdev
Published: 2023-05-17T00:00:00
State: PUBLISHED
title: Path Traversal: '\..\filename' in mlflow/mlflow
descriptions: value: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
affected: vendor: mlflow
product: mlflow/mlflow
versions: version: unspecified
lessThan: 2.3.1
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
problemTypes: descriptions: type: CWE
description: CWE-29 Path Traversal: '\..\filename'
cweId: CWE-29
source: advisory: b12b0073-0bb0-4bd1-8fc2-ec7f17fd7689
discovery: EXTERNAL