.. / CVE-2023-6023

• LFI
• Nuclei
• Web

Exploit for VertaAI ModelDB - Path Traversal (CVE-2023-6023)

Description:

The endpoint “/api/v1/artifact/getArtifact?artifact_path=” is vulnerable to path traversal. The main cause of this vulnerability is due to the lack of validation and sanitization of the artifact_path parameter.

Nuclei Template

View the template here CVE-2023-6023.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6023.yaml

References: