Description
MLflow 是一个简化机器学习开发的平台, 该应用中存在目录遍历漏洞，此漏洞是未充分验证用户输入的name参数的值导致的。
MLflow CVE-2023-1176 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-1176
https://github.com/mlflow/mlflow/security/advisories/GHSA-wp72-7hj9-5265
https://www.4hou.com/posts/KEKn
https://zhi.oscs1024.com/28464.html
https://advisories.gitlab.com/pypi/mlflow/CVE-2023-1176/
https://vuldb.com/?id.223809
https://app.opencve.io/cve/?page=2&product=mlflow&vendor=lfprojects