{"data":{"id":"256eb93f-d402-42bc-9403-2ad2da07ea47","title":"CVE-2024-3848: A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously…","summary":"A path traversal flaw in mlflow/mlflow version 2.11.0 bypasses the earlier fix for CVE-2023-6909. The application mishandles artifact URLs, where a '#' character lets an attacker insert a path into the fragment and skip validation, so the protocol scheme is ignored. An attacker can read arbitrary files, including SSH and cloud keys.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3848","publishedAt":"2024-05-16T13:15:14.543Z","cveId":"CVE-2024-3848","cweIds":["CWE-29","CWE-22"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@>= 2.9.2, < 2.12.1 (fixed: 2.12.1)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mlflow/mlflow path traversal in artifact URL handling via fragment","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.43284,"epssCheckedAt":"2026-11-04T00:12:27.430Z","kevDateAdded":null,"advisoryAliases":["GHSA-rfqq-wq6w-72jm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:03.143Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-04-17T03:38:20.299Z","daysToFix":-29,"fixCheckedAt":"2026-10-29T21:45:59.366Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"2.12.1","matchedVersion":"2.12.1","fixReleasedAt":"2024-04-17T03:38:20.299Z","daysToFix":-29,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:59.213Z"}]}}