Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-2928 PoC — MLflow 安全漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2928.yaml
Associated Vulnerability
Title:MLflow 安全漏洞 (CVE-2024-2928)
Description:Mlflow是一个机器学习生命周期的开源平台。 MLflow 存在安全漏洞，该漏洞源于发现了一个本地文件包含 (LFI) 漏洞。
Description
MLflow versions prior to 2.11.3 are vulnerable to a Path Traversal attack due to improper URI fragment parsing. This vulnerability allows attackers to read arbitrary files on the server, potentially exposing sensitive information.
File Snapshot

 id: CVE-2024-2928

info:
  name: MLflow < 2.11.3 - Path Traversal
  author: jyjyjy25,gy741,oriing,AN

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.