CVE-2023-5245

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada combust mleap. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract(). Arbitrary file creation can directly lead to code execution

Rincian

Terbit di NVD

15 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/combust/mleap/pull/866#issuecomment-1738032225 issue tracking · patch
• https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656/ exploit · advisory pihak ketiga