POC详情： e1159d9c429fe693e995c0157db56da5f649e3b2

来源
https://github.com/saimahmed/MLflow-Vuln
关联漏洞
标题： Mlflow 路径遍历漏洞 (CVE-2023-1177)
描述：Mlflow是一个机器学习生命周期的开源平台。 Mlflow 2.2.1之前版本存在安全漏洞，该漏洞源于存在路径遍历漏洞。
描述
MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced
介绍
[Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf](https://github.com/user-attachments/files/16695178/Vuln.replication-mlflow.ver.2.1.1-prep.by.Saima.pdf)

# MLflow-Vulnerability
MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced
One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced a combined Local File Inclusion/Remote File Inclusion vulnerability which can lead to a complete system or cloud provider takeover. MLflow versions before 2.2.1 are vulnerable to Local File Inclusion (LFI) due to insufficient sanitization of user input in the API for retrieving model versions and registered models. An adversary could exploit this to read arbitrary files on the server's filesystem.
# Impact:
1. Information disclosure of sensitive server files (e.g., configuration files, keys).
2. Potential system compromise if the attacker can gain unauthorized access to critical system files.
# Mitigation:
1. Upgrade to MLflow 2.2.1 or later (addresses the vulnerability).
2. Implement access control measures for your MLflow server.
文件快照

 [4.0K]  /data/pocs/e1159d9c429fe693e995c0157db56da5f649e3b2
├── [106K]  experiments1_mlflow - Copy.png
├── [ 74K]  experiments_mlflow - Copy.png
├── [133K]  get_model_versions_get_artifact_unknown format_500error - Copy.png
├── [230K]  id_rsa_in BS_PShell - Copy.png
├── [ 41K]  models_mlflow.png
├── [ 39K]  model_vers1_pshell - Copy.png
├── [ 39K]  model_vers1_pshell.png
├── [ 45K]  modesl_mlflow.png
├── [224K]  proj_sou_post_model_vers.png
├── [334K]  proj_sour_model_vers_get_artf_path_modified_1_ver11.png
├── [388K]  proj_sour_model_vers_get_artf_path_modified.png
├── [383K]  proj_sour_model_vers_get_artf_path_modified_ver11.png
├── [270K]  proj_sour_model_vers_get_artf.png
├── [208K]  proj_sour_post_model_vers_chan_source.png
├── [1.1K]  README.md
├── [170K]  url_changed_in model.png
└── [1.8M]  Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf

0 directories, 17 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。