Description
MLflow 是一个机器学习的开源平台。MLflow 开源平台 get-artifact 存在目录遍历漏洞，攻击者可读取系统所有敏感文件。
MLflow get-artifact /ajax-api/2.0/mlflow/model-versions/create 目录遍历漏洞（CVE-2023-6977）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-6977
https://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf
https://github.com/advisories/GHSA-qg8p-32gr-gh6x
https://www.miggo.io/vulnerability-database/cve/CVE-2023-6977
https://advisories.gitlab.com/pypi/mlflow/CVE-2023-6977/
https://security.snyk.io/vuln/SNYK-PYTHON-MLFLOW-6134596
https://vuldb.com/vuln/248495
https://avd.aliyun.com/product?prod=mlflow
https://www.anquan114.com/archives/1140