Critical severityNVD Advisory· Published Dec 20, 2023· Updated Aug 2, 2024

Path Traversal: '\..\filename'

CVE-2023-6975

Description

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mlflowPyPI	< 2.9.2	2.9.2

osv-coords2 versions
pkg:bitnami/mlflow pkg:pypi/mlflow
< 2.9.2+ 1 more
- (no CPE)range: < 2.9.2
- (no CPE)range: < 2.9.2
Mlflow/Mlflowcpe-rescue
Range: unspecified

No linked articles in our index yet.