high7.5
CVE-2023-6023
An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
Impact
An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vertaai | Modeldb | All versions |