{"id":"CVE-2023-6909","published":"2023-12-18T00:00:31Z","modified":"2024-08-02T08:42:08Z","title":"Path Traversal: '\\..\\filename' in mlflow/mlflow","vendor":"mlflow","product":"mlflow/mlflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"mlflow","product":"mlflow/mlflow","versions":[">= unspecified, < 2.9.2"]}],"description":{"text":"Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.","provenance":"source","from":"CVE.org"},"summary":{"text":"The path traversal flaw lies in the mlflow/mlflow GitHub repository, in its handling of filenames containing '\\..\\' sequences, in versions prior to 2.9.2. An attacker with network access and no authentication or user interaction could exploit this to read data beyond the intended directory, with the impact limited to confidentiality.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:12Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.89716,"percentile":0.99788,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-04-30","exploitedFirstSeen":"2026-04-30","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-30&host_type=src&vulnerability=cve-2023-6909","date":"2026-04-30"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-01&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-01"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-02&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-02"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-03&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-03"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-04&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-04"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-06&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-07&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-07"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-11&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-11"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-16&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-24&host_type=src&vulnerability=cve-2023-6909","date":"2026-05-24"}],"evidenceTotal":96,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-29","name":"Path Traversal: '..filename'"}],"references":[{"url":"https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850","tags":[]},{"url":"https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.9.2"],"patched":["2.9.2"],"from":["GHSA-5r3q-93q3-f978","PYSEC-2023-252"],"provenance":"source"}],"advisories":[{"id":"GHSA-5r3q-93q3-f978","url":"https://github.com/advisories/GHSA-5r3q-93q3-f978","severity":"HIGH","ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.9.2"],"patched":["2.9.2"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-0153","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0153","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-6909","name":"Mlflow <2.9.2 - Path Traversal","severity":"high","path":"http/cves/2023/CVE-2023-6909.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6909.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-12-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-6909","provenance":"source"},{"date":"2026-04-30","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-30&host_type=src&vulnerability=cve-2023-6909","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":70.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 184 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.96,"detail":"percentile 0.9979"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"children":[{"from":"CVE-2023-6909","to":"CVE-2024-1594","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.","from":"CVE.org","in":"CVE-2024-1594"}]}]}}