CVE-2023-6018 – mlflow

Package

Manager: pip
Name: mlflow
Vulnerable Version: >=0 <2.9.2

Severity

Level: Critical

CVSS v3.1: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS: 0.88386 pctl0.99469

Details

Remote Code Execution due to Full Controled File Write in mlflow The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

Metadata

Created: 2023-11-16T18:30:31Z
Modified: 2024-08-08T20:05:58Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-5p3h-7fwh-92rc/GHSA-5p3h-7fwh-92rc.json
CWE IDs: ["CWE-78"]
Alternative ID: GHSA-5p3h-7fwh-92rc
Finding: F004
Auto approve: 1