{"vulnerability": "cve-2023-6909", "sightings": [{"uuid": "1d085e9a-1166-4aa4-a65b-f15c180f90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "Telegram/r1wKJXjH2pTO0xeaSE1QheSc4QAYiX6QzNohFiLFxNX558lD", "content": "", "creation_timestamp": "2025-02-06T02:39:18.000000Z"}, {"uuid": "204b9d34-4ed3-488a-acff-421cd5146894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/ctinow/156875", "content": "https://ift.tt/OFrMReH\nCVE-2023-6909 Exploit", "creation_timestamp": "2023-12-20T11:17:57.000000Z"}, {"uuid": "74894495-1f44-421c-8a4c-845c17df4de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/arpsyndicate/4711", "content": "#ExploitObserverAlert\n\nCVE-2024-1594\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1594. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "creation_timestamp": "2024-04-18T06:48:53.000000Z"}, {"uuid": "3087529a-9cb2-46eb-a50e-0e4e1b57b417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/ctinow/167138", "content": "https://ift.tt/wTlG48E\nCVE-2023-6909 | mlflow up to 2.9.1 path traversal", "creation_timestamp": "2024-01-12T09:11:38.000000Z"}]}