{"id":"CVE-2023-1177","published":"2023-03-24T00:00:00Z","modified":"2025-02-19T20:56:12Z","title":"Path Traversal: '\\..\\filename' in mlflow/mlflow","vendor":"mlflow","product":"mlflow/mlflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"mlflow","product":"mlflow/mlflow","versions":[">= unspecified, < 2.2.1"]}],"description":{"text":"Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\n\n","provenance":"source","from":"CVE.org"},"summary":{"text":"The path traversal flaw affects the mlflow/mlflow repository (the MLflow project) in versions prior to 2.2.1, where file paths containing backslash-based parent-directory sequences (\"\\..\\filename\") are not properly restricted. An attacker with network access can exploit it without authentication or user interaction, provided the vulnerable component is reachable, to access files outside the intended directory.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:40Z"},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.6968,"percentile":0.99367,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-12-01","exploitedFirstSeen":"2023-12-01","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-01&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-01"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-04&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-04"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-06&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-10&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-10"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-14&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-14"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-15&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-15"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-19&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-19"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-20&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-21&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-22&host_type=src&vulnerability=cve-2023-1177","date":"2023-12-22"}],"evidenceTotal":577,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-29","name":"Path Traversal: '..filename'"}],"references":[{"url":"https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28","tags":[]},{"url":"https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.2.1"],"patched":["2.2.1"],"from":["GHSA-xg73-94fp-g449","PYSEC-2023-29"],"provenance":"source"}],"advisories":[{"id":"GHSA-xg73-94fp-g449","url":"https://github.com/advisories/GHSA-xg73-94fp-g449","severity":"CRITICAL","ecosystem":"PyPI","package":"mlflow","vulnerableRanges":["<2.2.1"],"patched":["2.2.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-0157","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0157","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":5,"skipped":1,"earliest":"2023-11-20","earliestUrl":"https://github.com/SpycioKon/CVE-2023-1177-rebuild","repos":[{"name":"SpycioKon/CVE-2023-1177-rebuild","url":"https://github.com/SpycioKon/CVE-2023-1177-rebuild","stars":0,"created":"2023-11-20"},{"name":"alphandbelt1/CVE-2023-1177-MLFlow","url":"https://github.com/alphandbelt1/CVE-2023-1177-MLFlow","stars":0,"created":"2024-08-08"},{"name":"saimahmed/MLflow-Vuln","url":"https://github.com/saimahmed/MLflow-Vuln","stars":0,"created":"2024-08-21"},{"name":"charlesgargasson/CVE-2023-1177","url":"https://github.com/charlesgargasson/CVE-2023-1177","stars":0,"created":"2024-09-19"},{"name":"paultheal1en/CVE-2023-1177-PoC-reproduce","url":"https://github.com/paultheal1en/CVE-2023-1177-PoC-reproduce","stars":0,"created":"2025-04-12"}]},"nuclei":[{"id":"CVE-2023-1177","name":"Mlflow <2.2.1 - Local File Inclusion","severity":"critical","path":"http/cves/2023/CVE-2023-1177.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1177.yaml"}],"first":{"date":"2023-11-20","source":"PoC-in-GitHub","url":"https://github.com/SpycioKon/CVE-2023-1177-rebuild"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-03-24","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-1177","provenance":"source"},{"date":"2023-11-20","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/SpycioKon/CVE-2023-1177-rebuild","provenance":"source"},{"date":"2023-12-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-01&host_type=src&vulnerability=cve-2023-1177","provenance":"source"}],"speed":{"daysToPublicExploit":241,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":66.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1066 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.87,"detail":"percentile 0.9937"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"5 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.51,"detail":"base score 9.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}