{"id":"CVE-2024-3848","published":"2024-05-16T09:03:47Z","modified":"2024-08-01T20:26:57Z","title":"Path Traversal Bypass in mlflow/mlflow","vendor":"mlflow","product":"mlflow/mlflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"mlflow","product":"mlflow/mlflow","versions":[">= unspecified, < 2.12.1"]}],"description":{"text":"A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a path traversal bypass in the artifact URL handling of mlflow/mlflow, which allows a '#' character in the URL fragment to skip validation and route file access to an arbitrary path. An attacker who can submit a crafted artifact URL to the application can read arbitrary files from the server's filesystem, including sensitive material such as SSH and cloud keys, and no authentication or user interaction is indicated as required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-30T13:35:38Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.43284,"percentile":0.98724,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-10-27","exploitedFirstSeen":"2026-10-27","ransomware":false,"evidence":[{"url":"https://previdian.com/CVE-2024-3848","date":"2026-10-27"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-29","name":"Path Traversal: '..filename'"}],"references":[{"url":"https://huntr.com/bounties/8d5aadaa-522f-4839-b41b-d7da362dd610","tags":[]},{"url":"https://github.com/mlflow/mlflow/commit/f8d51e21523238280ebcfdb378612afd7844eca8","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"mlflow","vulnerableRanges":[">=2.9.2, <2.12.1","<2.12.1"],"patched":["2.12.1"],"from":["GHSA-rfqq-wq6w-72jm","PYSEC-2024-244"],"provenance":"source"}],"advisories":[{"id":"GHSA-rfqq-wq6w-72jm","url":"https://github.com/advisories/GHSA-rfqq-wq6w-72jm","severity":"HIGH","ecosystem":"PyPI","package":"mlflow","vulnerableRanges":[">=2.9.2, <2.12.1"],"patched":["2.12.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2024-1773","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-1773","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2024-3848","name":"Mlflow < 2.11.0 - Path Traversal","severity":"high","path":"http/cves/2024/CVE-2024-3848.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3848.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-05-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-3848","provenance":"source"},{"date":"2026-10-27","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://previdian.com/CVE-2024-3848","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":75.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 3 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.74,"detail":"percentile 0.9872"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}