CVE-2024-1560

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and `local_file_uri_to_path` function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the `delete_artifacts` function of `local_artifact_repo.py`, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.

• CWE-22

• https://huntr.com/bounties/4a34259c-3c8f-4872-b178-f27fbc876b98Exploit, Issue Tracking, Third Party Advisory
• https://huntr.com/bounties/4a34259c-3c8f-4872-b178-f27fbc876b98Exploit, Issue Tracking, Third Party Advisory

Published

Apr 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1554The `fetch()` API and navigation incorrectly shared the same…9.8
• CVE-2024-1555When opening a website using the `firefox://` protocol handl…8.3
• CVE-2024-1556The incorrect object was checked for NULL in the built-in pr…6.5
• CVE-2024-1557Memory safety bugs present in Firefox 122. Some of these bug…8.1
• CVE-2024-1558A path traversal vulnerability exists in the `_create_model_…7.5
• CVE-2024-1559The Link Library plugin for WordPress is vulnerable to Store…6.1
• CVE-2024-1561An issue was discovered in gradio-app/gradio, where the `/co…7.5
• CVE-2024-1562The WooCommerce Google Sheet Connector plugin for WordPress …5.3
• CVE-2024-1563An attacker could have executed unauthorized scripts on top …8.1
• CVE-2024-1564The wp-schema-pro WordPress plugin before 2.7.16 does not va…4.3
• CVE-2024-1565The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wis…5.4
• CVE-2024-1566The Redirects plugin for WordPress is vulnerable to unauthor…6.5