Description
mlflow中存在目录遍历漏洞，此漏洞是由于程序未充分验证用户输入的DELETE请求中包含数据所导致的。
mlflow CVE-2023-6831 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.snyk.io/vuln/SNYK-PYTHON-MLFLOW-6128849
https://nvd.nist.gov/vuln/detail/cve-2023-6831
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6831.yaml
https://avd.aliyun.com/detail?id=AVD-2023-6831
https://zhi.oscs1024.com/40119.html
https://feedly.com/cve/CVE-2023-6831
https://stack.chaitin.com/vuldb/detail/8a9c495b-63e2-4caa-bfb7-c102b2fd0689