cve/2023/CVE-2023-1177.md

CVE-2023-1177

Description

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

POC

Reference

• https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/ARPSyndicate/cvemon
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Threekiii/Awesome-POC
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/google/tsunami-security-scanner-plugins
• https://github.com/hh-hunter/ml-CVE-2023-1177
• https://github.com/iumiro/CVE-2023-1177-MLFlow
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/protectai/Snaike-MLflow
• https://github.com/tiyeume25112004/CVE-2023-1177-rebuild