Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-1177-PoC-reproduce — PoC of CVE-2023-1177 vulnerability in MLflow (Reproduce) | Kitploit
Tools/GitHubGitHub/paultheal1en/cve-2023-1177-poc-reproduce
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubpaultheal1en/cve-2023-1177-poc-reproduce

CVE-2023-1177-PoC-reproduce

PoC of CVE-2023-1177 vulnerability in MLflow (Reproduce)

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MLflow CVE-2023-1177 - PoC & Reproduce

This repository contains Proof-of-Concept (PoC) exploit code and instructions to reproduce the Local File Inclusion (LFI) vulnerability in MLflow, identified as CVE-2023-1177.

Vulnerability Information:

  • CVE ID: CVE-2023-1177
  • Vulnerability Type: Local File Inclusion (LFI) / Path Traversal
  • Affected Versions: MLflow <= 2.1.1
  • Patched Version: MLflow >= 2.2.1 (NVD states 2.2.1, but I believe it is from 2.3.1)
  • Description: The vulnerability exists in how the GET /model-versions/get-artifact endpoint handles paths. An attacker can create a model version with the source field modified to a local path on the server (using file:///). Then, by calling the get-artifact endpoint with the path parameter pointing to a desired file (relative to the modified source), the attacker can read the contents of arbitrary files on the server's filesystem with the privileges of the user running the MLflow server.

Environment Setup:

  1. Install Conda: Ensure you have installed Miniconda or Anaconda.
  2. Create Conda Environment: Use the provided environment.yml file in this repository to recreate exactly the environment used for testing:
    root@kitploit:~
    conda env create -f environment.yml
    This will create an environment named attack (or the name defined in the yml file) with Python and all necessary packages (including mlflow==2.1.1, requests, pandas, databricks-cli and a compatible version of setuptools).
  3. Activate the environment:
    root@kitploit:~
    conda activate attack

Steps to reproduce the vulnerability and PoC, plus a challenge if you are too lazy to reproduce, you can check out this link: https://hackmd.io/@paultheal1en/SymHyk10kg

Download Tool