CVE-2023-1177 PoC — Mlflow 路径遍历漏洞

Source

https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/MLflow%20get-artifact%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2023-1177.md

Associated Vulnerability

Title:Mlflow 路径遍历漏洞 (CVE-2023-1177)
Description:Mlflow是一个机器学习生命周期的开源平台。 Mlflow 2.2.1之前版本存在安全漏洞，该漏洞源于存在路径遍历漏洞。

File Snapshot


 # MLflow get-artifact 任意文件读取漏洞 CVE-2023-1177

## 漏洞描述

使用 MLflow 模型注册表托管 MLflow 开源项目的用户 mlflow serve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.