CVE-2023-1177

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-29CWE-22

Affected software

VendorProductVersions
mlflowmlflow/mlflow>= unspecified, < 2.2.1

References

Timeline

Published
Mar 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-11785.7An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5,CVE-2023-11795.4A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected isCVE-2023-11806.1A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected CVE-2023-11815.4Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.CVE-2023-11835.5A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where thCVE-2023-11848.8A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionaCVE-2023-11858.8A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New ProCVE-2023-11865.5A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the CVE-2023-11875.5A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown procCVE-2023-11885.5A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0xCVE-2023-11895.5A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability isCVE-2023-11907.8A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown funct
CVE-2023-1177: Critical severity, CVSS 9.8 | Vulnix