.. / CVE-2023-6018

• Access Control
• Nuclei
• Web

Exploit for Mlflow - Arbitrary File Write (CVE-2023-6018)

Description:

An attacker can overwrite any file on the server hosting MLflow without any authentication.

Nuclei Template

View the template here CVE-2023-6018.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6018.yaml

References: