cve/2023/CVE-2023-2356.md

### [CVE-2023-2356](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2356)
![](https://img.shields.io/static/v1?label=Product&message=mlflow%2Fmlflow&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202.3.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-23%20Relative%20Path%20Traversal&color=brighgreen)

### Description

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.

### POC

#### Reference
- https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896
- https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896

#### Github
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors