CVE-2024-1593 json
Path Traversal via Parameter Smuggling in mlflow/mlflow
published 2024-04-16 2 y ago modified 2026-09-08 2 mo ago also BIT-mlflow-2024-1593 , EUVD-2024-1192 , GHSA-f42m-mvfv-cgw5 , PYSEC-2026-1649
- cvss
- 7.5
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. This vulnerability allows for arbitrary data smuggling into the 'params' part of the URL, enabling attacks similar to those described in previous reports but utilizing the ';' character for parameter smuggling. Successful exploitation could lead to unauthorized information disclosure or server compromise.
Patch / fix
- bitnami mlflow 2.11.3
- lfprojects mlflow 2.11.3
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.70% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- huntr.com https://huntr.com/bounties/dbdc6bd6-d09a-46f2-9d9c-5138a14b6e31 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | mlflow | <=2.9.2 |
no fix listed |
| bitnami | mlflow | <2.11.3 |
2.11.3 |
Affected products
- mlflow mlflow/mlflow
- mlflow mlflow
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
huntr.com
/bounties/dbdc6bd6-d09a-46f2-9d9c-5138a14b6e31
web, exploit, issue-tracking, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-1593
advisory, web
-
github.com
/mlflow/mlflow
package
-
pypi.org
/project/mlflow
package
-
github.com
/advisories/GHSA-f42m-mvfv-cgw5
advisory
Sources
- CVE List CVE-2024-1593
- GitHub Advisory GHSA-f42m-mvfv-cgw5
- NVD CVE-2024-1593
- OSV BIT-mlflow-2024-1593
- OSV PYSEC-2026-1649
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.