GHSA-5p3h-7fwh-92rc
Remote Code Execution due to Full Controled File Write in mlflow
At a glance
- Published
- Updated
- CVE
- CVE-2023-6018
- Aliases
- BIT-mlflow-2023-6018, PYSEC-2026-417
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.
Affected packages
| Package | Versions |
|---|---|
| PyPI · mlflow | introduced 0, fixed 2.9.2 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-6018 ADVISORY
- https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd WEB
- https://github.com/mlflow/mlflow PACKAGE
- https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |