CVE-2023-1177 PoC — Path Traversal: '\..\filename' in mlflow/mlflow

Source

Associated Vulnerability

Description

MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced

Readme

[Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf](https://github.com/user-attachments/files/16695178/Vuln.replication-mlflow.ver.2.1.1-prep.by.Saima.pdf)

# MLflow-Vulnerability
MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced
One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced a combined Local File Inclusion/Remote File Inclusion vulnerability which can lead to a complete system or cloud provider takeover. MLflow versions before 2.2.1 are vulnerable to Local File Inclusion (LFI) due to insufficient sanitization of user input in the API for retrieving model versions and registered models. An adversary could exploit this to read arbitrary files on the server's filesystem.
# Impact:
1. Information disclosure of sensitive server files (e.g., configuration files, keys).
2. Potential system compromise if the attacker can gain unauthorized access to critical system files.
# Mitigation:
1. Upgrade to MLflow 2.2.1 or later (addresses the vulnerability).
2. Implement access control measures for your MLflow server.

File Snapshot

 [4.0K]  /data/pocs/e1159d9c429fe693e995c0157db56da5f649e3b2
├── [106K]  experiments1_mlflow - Copy.png
├── [ 74K]  experiments_mlflow - Copy.png
├── [133K]  get_model_versions_get_artifact_unknown format_500error - Copy.png
├── [230K]  id_rsa_in BS_PShell - Copy.png
├── [ 41K]  models_mlflow.png
├── [ 39K]  model_vers1_pshell - Copy.png
├── [ 39K]  model_vers1_pshell.png
├── [ 45K]  modesl_mlflow.png
├── [224K]  proj_sou_post_model_vers.png
├── [334K]  proj_sour_model_vers_get_artf_path_modified_1_ver11.png
├── [388K]  proj_sour_model_vers_get_artf_path_modified.png
├── [383K]  proj_sour_model_vers_get_artf_path_modified_ver11.png
├── [270K]  proj_sour_model_vers_get_artf.png
├── [208K]  proj_sour_post_model_vers_chan_source.png
├── [1.1K]  README.md
├── [170K]  url_changed_in model.png
└── [1.8M]  Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf

0 directories, 17 files

Remarks