CVSS: 9.8EPSS: 21%CPEs: 1EXPL: 4CVE-2023-1177 – Path Traversal: '\..\filename' in mlflow/mlflow
https://notcve.org/view.php?id=CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. • https://github.com/iumiro/CVE-2023-1177-MLFlow https://github.com/hh-hunter/ml-CVE-2023-1177 https://github.com/tiyeume25112004/CVE-2023-1177-rebuild https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-29: Path Traversal: '\..\filename' •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0736 – Insecure Temporary File in mlflow/mlflow
https://notcve.org/view.php?id=CVE-2022-0736
Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. Un Archivo Temporal no Seguro en el repositorio de GitHub mlflow/mlflow versiones anteriores a 1.23.1 • https://github.com/mlflow/mlflow/commit/61984e6843d2e59235d82a580c529920cd8f3711 https://huntr.dev/bounties/e5384764-c583-4dec-a1d8-4697f4e12f75 • CWE-377: Insecure Temporary File •