CVE Catalog
CVE-2023-3765
CriticalCVSS 10.0Exploitation Probability (EPSS)
Very high risk70.74%
99th percentile - higher than 99% of all known CVEs
Summary
There is an absolute path traversal vulnerability in the GitHub repository mlflow/mlflow prior to version 2.5.0.
Risk Assessment
An attacker could gain access to system files, potentially leading to the exposure of sensitive data.
Recommendation
It is recommended to upgrade to version 2.5.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.