{"id":"CVE-2023-3765","published":"2023-07-19T00:53:33Z","modified":"2024-10-24T18:25:35Z","title":"Absolute Path Traversal in mlflow/mlflow","vendor":"mlflow","product":"mlflow/mlflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"mlflow","product":"mlflow/mlflow","versions":[">= unspecified, < 2.5.0"]}],"description":{"text":"Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.","provenance":"source","from":"CVE.org"},"summary":{"text":"An absolute path traversal flaw exists in the mlflow/mlflow GitHub repository, in versions prior to 2.5.0. The vulnerability lets an attacker reach files outside the intended directory by supplying absolute paths, and it can be exploited remotely without authentication or user interaction.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:07Z"},"cvss":{"score":10,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.6755,"percentile":0.9931,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-36","name":"Absolute Path Traversal"}],"references":[{"url":"https://huntr.dev/bounties/4be5fd63-8a0a-490d-9ee1-f33dc768ed76","tags":[]},{"url":"https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.5.0"],"patched":["2.5.0"],"from":["GHSA-fmxj-6h9g-6vw3","PYSEC-2023-308"],"provenance":"source"}],"advisories":[{"id":"GHSA-fmxj-6h9g-6vw3","url":"https://github.com/advisories/GHSA-fmxj-6h9g-6vw3","severity":"CRITICAL","ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.5.0"],"patched":["2.5.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-2050","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2050","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-3765","name":"MLflow Absolute Path Traversal","severity":"critical","path":"http/cves/2023/CVE-2023-3765.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3765.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-07-19","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-3765","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":31.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9931"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":7.0,"detail":"base score 10"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-mlflow-mlflow-cve-2023-2780","children":[{"from":"CVE-2023-3765","to":"CVE-2025-1473","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/pyfunc/scoring_server/__init__.py"],"commits":["https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2023-1176","published":"2023-03-24","fixed":"2.2.2","kev":false},{"cve":"CVE-2023-2356","published":"2023-04-28","fixed":"2.3.1","kev":false},{"cve":"CVE-2023-2780","published":"2023-05-17","fixed":"2.3.1","kev":false,"link":{"from":"CVE-2023-2780","to":"CVE-2023-3765","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:mlflow","fromFixed":"2.3.1","toFixed":"2.5.0","daysApart":63}]}},{"cve":"CVE-2023-3765","published":"2023-07-19","fixed":"2.5.0","kev":false},{"cve":"CVE-2023-4033","published":"2023-08-01","fixed":"2.6.0","kev":false,"link":{"from":"CVE-2023-3765","to":"CVE-2023-4033","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:mlflow","fromFixed":"2.5.0","toFixed":"2.6.0","daysApart":13},{"kind":"similar","provenance":"machine","score":0.58,"basis":"same product + description similarity"}]}},{"cve":"CVE-2023-6014","published":"2023-11-16","fixed":"2.8.0","kev":false},{"cve":"CVE-2023-6015","published":"2023-11-16","fixed":"2.8.1","kev":false}],"package":"PyPI:mlflow"}}