CVE-2024-3573
Critical
Description
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.
SeverityCritical
CVSS9.3
Exploit probability—
ProductLfprojects Mlflow
PublishedApr 16, 2024
First seenApr 16, 2024
Weakness typeCWE-29CWE-29
How to fix
Update
- lfprojects mlflow2.10.0 or later
- mlflow2.10.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lfprojects mlflow | v < 2.10.0 | 2.10.0 |
| mlflowPyPI | v < 2.10.0 | 2.10.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.