Description (CNA)
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mlflow / mlflow/mlflow | affected unspecified before 2.3.1 |
CWE
CWE-23
References
- https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896
- https://github.com/mlflow/mlflow/commit/f73147496e05c09a8b83d95fb4f1bf86696c6342
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.