CVE-2023-5245

Using MLeap for loading a saved model (zip archive) can lead to path traversal/arbitrary file creation and possibly remote code execution.

State: Published
Severity: 7.5 High
Published: Nov 15, 2023
Updated: Aug 2, 2024
Reserved: Sep 28, 2023

Read the record on cve.org

Description

FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.

When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract().

Arbitrary file creation can directly lead to code execution

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	JFROG

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
ml.combust.mleap.mleap-tensorflow	0.18.0 to before 0.23.1Affected

References

https://github.com/combust/mleap/pull/866#issuecomment-1738032225patch
https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656/third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.