Path Traversal
Discription
mlflow is vulnerable to Path Traversal. The vulnerability exists because the `handlers.py` does not properly sanitize the path parameter, which allows an attacker to access files outside the expected directory and read arbitrary files through the `/get-artifact` API endpoint.Read More
References
Back to Main