ghsa-5p3h-7fwh-92rc
Vulnerability from github
Published
2023-11-16 18:30
Modified
2024-08-08 20:05
Severity
Summary
Remote Code Execution due to Full Controled File Write in mlflow
Details
The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting /home/<user>/.bashrc). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 2.8.1"
},
"package": {
"ecosystem": "PyPI",
"name": "mlflow"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2023-6018"
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"github_reviewed": true,
"github_reviewed_at": "2023-11-28T21:58:57Z",
"nvd_published_at": "2023-11-16T16:15:34Z",
"severity": "CRITICAL"
},
"details": "The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/\u003cuser\u003e/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data \u0026 models information.",
"id": "GHSA-5p3h-7fwh-92rc",
"modified": "2024-08-08T20:05:58Z",
"published": "2023-11-16T18:30:31Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6018"
},
{
"type": "WEB",
"url": "https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd"
},
{
"type": "PACKAGE",
"url": "https://github.com/mlflow/mlflow"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Remote Code Execution due to Full Controled File Write in mlflow"
}
Loading...