Vulnerability Database
Blog
FAQ
Docs
PYSEC-2023-69
See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/mlflow/PYSEC-2023-69.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/PYSEC-2023-69
Aliases
BIT-mlflow-2023-2780
CVE-2023-2780
GHSA-wjq3-7jxx-whj9
Published
2023-05-17T21:15:00Z
Modified
2023-12-06T00:47:53.977736Z
Summary
[none]
Details
Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
References
https://huntr.dev/bounties/b12b0073-0bb0-4bd1-8fc2-ec7f17fd7689
https://github.com/mlflow/mlflow/commit/fae77a525dd908c56d6204a4cef1c1c75b4e9857
Affected packages
PyPI
/
mlflow
Package
Name
mlflow
View open source insights on deps.dev
Purl
pkg:pypi/mlflow
Affected ranges
Type
GIT
Repo
https://github.com/mlflow/mlflow
Events
Introduced
0
Unknown introduced commit / All previous commits are affected
Fixed
fae77a525dd908c56d6204a4cef1c1c75b4e9857
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.3.1
Affected versions
0.*
0.0.1
0.1.0
0.2.0
0.2.1
0.3.0
0.4.0
0.4.1
0.4.2
0.5.0
0.5.1
0.5.2
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.9.0
0.9.0.1
0.9.1
1.*
1.0.0
1.1.0
1.1.1.dev0
1.2.0
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.9.0
1.9.1
1.10.0
1.11.0
1.12.0
1.12.1
1.13
1.13.1
1.14.0
1.14.1
1.15.0
1.16.0
1.17.0
1.18.0
1.19.0
1.20.0
1.20.1
1.20.2
1.21.0
1.22.0
1.23.0
1.23.1
1.24.0
1.25.0
1.25.1
1.26.0
1.26.1
1.27.0
1.28.0
1.29.0
1.30.0
1.30.1
2.*
2.0.0rc0
2.0.0
2.0.1
2.1.0
2.1.1
2.2.0
2.2.1
2.2.2
2.3.0
PYSEC-2023-69 - OSV