Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
{ "nvd_published_at": "2023-04-28T00:15:08Z", "cwe_ids": [ "CWE-23" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-05-01T13:43:17Z" }
{ "affected_functions": [ "mlflow.server.handlers._validate_non_local_source_contains_relative_paths", "mlflow.server.handlers._validate_source" ] }