CVE-2024-3573 | mlflow up to 2.9.x is_local_uri source path traversal

CVE-2024-3573 | mlflow up to 2.9.x is_local_uri source path traversal

A vulnerability classified as critical was found in mlflow up to 2.9.x. This vulnerability affects the function is_local_uri. The manipulation of the argument source leads to path traversal: '\..\filename'. This vulnerability was named CVE-2024-3573. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.