id: PYSEC-2024-243
modified: 2025-04-08T10:23:25.044416Z
published: 2024-04-16T00:15:12Z
aliases:
- CVE-2024-3573
- GHSA-hq88-wg7q-gp4g
details: mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper
  parsing of URIs, allowing attackers to bypass checks and read arbitrary files on
  the system. The issue arises from the 'is_local_uri' function's failure to properly
  handle URIs with empty or 'file' schemes, leading to the misclassification of URIs
  as non-local. Attackers can exploit this by crafting malicious model versions with
  specially crafted 'source' parameters, enabling the reading of sensitive files within
  at least two directory levels from the server's root.
affected:
- package:
    ecosystem: PyPI
    name: mlflow
    purl: pkg:pypi/mlflow
  ranges:
  - type: GIT
    events:
    - introduced: "0"
    - fixed: 438a450714a3ca06285eeea34bdc6cf79d7f6cbc
    - fixed: 438a450714a3ca06285eeea34bdc6cf79d7f6cbc
    repo: https://github.com/mlflow/mlflow
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.10.0
  versions:
  - 0.0.1
  - 0.1.0
  - 0.2.0
  - 0.2.1
  - 0.3.0
  - 0.4.0
  - 0.4.1
  - 0.4.2
  - 0.5.0
  - 0.5.1
  - 0.5.2
  - 0.6.0
  - 0.7.0
  - 0.8.0
  - 0.8.1
  - 0.8.2
  - 0.9.0
  - 0.9.0.1
  - 0.9.1
  - 1.0.0
  - 1.1.0
  - 1.1.1.dev0
  - 1.10.0
  - 1.11.0
  - 1.12.0
  - 1.12.1
  - "1.13"
  - 1.13.1
  - 1.14.0
  - 1.14.1
  - 1.15.0
  - 1.16.0
  - 1.17.0
  - 1.18.0
  - 1.19.0
  - 1.2.0
  - 1.20.0
  - 1.20.1
  - 1.20.2
  - 1.21.0
  - 1.22.0
  - 1.23.0
  - 1.23.1
  - 1.24.0
  - 1.25.0
  - 1.25.1
  - 1.26.0
  - 1.26.1
  - 1.27.0
  - 1.28.0
  - 1.29.0
  - 1.3.0
  - 1.30.0
  - 1.30.1
  - 1.4.0
  - 1.5.0
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.7.2
  - 1.8.0
  - 1.9.0
  - 1.9.1
  - 2.0.0
  - 2.0.0rc0
  - 2.0.1
  - 2.1.0
  - 2.1.1
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
  - 2.4.2
  - 2.5.0
  - 2.6.0
  - 2.7.0
  - 2.7.1
  - 2.8.0
  - 2.8.1
  - 2.9.0
  - 2.9.1
  - 2.9.2
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
references:
- type: EVIDENCE
  url: https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c
- type: FIX
  url: https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc
- type: REPORT
  url: https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c
- type: WEB
  url: https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c
- type: ADVISORY
  url: https://github.com/advisories/GHSA-hq88-wg7q-gp4g