CVE-2023-1177 PoC — Path Traversal: '\..\filename' in mlflow/mlflow

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1177.yaml

Associated Vulnerability

Title: Path Traversal: '\..\filename' in mlflow/mlflow (CVE-2023-1177)
Description:Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

Description

Mlflow before 2.2.1 is susceptible to local file inclusion due to path traversal \..\filename in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →