CVE-2023-6977 PoC — Path Traversal: '\..\filename'

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6977.yaml

Associated Vulnerability

Title: Path Traversal: '\..\filename' (CVE-2023-6977)
Description:This vulnerability enables malicious users to read sensitive files on the server.

Description

Mlflow before 2.8.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →