CVE-2024-1560: Path Traversal Vulnerability in mlflow/mlflow
A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the deleteartifactmlflowartifacts handler and localfileuritopath function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the deleteartifacts function of localartifactrepo.py, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1560?
CVE-2024-1560 has a medium severity rating, indicating a moderate risk of exploitation.
How do I fix CVE-2024-1560?
To fix CVE-2024-1560, update the mlflow package to version 2.10.0 or later, where the vulnerability is addressed.
What types of attacks can exploit CVE-2024-1560?
Attackers can exploit CVE-2024-1560 by leveraging the path traversal vulnerability to delete unauthorized artifacts.
Which versions of mlflow are affected by CVE-2024-1560?
CVE-2024-1560 affects mlflow versions up to and including 2.9.2.
What is a path traversal vulnerability as seen in CVE-2024-1560?
A path traversal vulnerability allows an attacker to access files and directories that are stored outside of the web document root folder.