{"metadata": {"vulnerability": "CVE-2023-6831", "count": 20, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 10}}, "data": [{"timestamp": "2023-12-15T00:00:11.891Z", "date_only": false, "value": "2023-12-15T00:00:11.891Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-6831", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-15T00:00:31.210Z", "date_only": false, "value": "2023-12-15T00:00:31.210Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-6831", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-12-15T01:15:00Z", "date_only": false, "value": "2023-12-15T01:15:00+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2023-253", "record": "PYSEC-2023-253", "field": "published"}, {"timestamp": "2023-12-15T01:15:08Z", "date_only": false, "value": "2023-12-15T01:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-554W-XH4J-8W64", "record": "GHSA-554W-XH4J-8W64", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-12-15T01:15:08.140Z", "date_only": false, "value": "2023-12-15T01:15:08.140", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6831", "record": "FKIE_CVE-2023-6831", "field": "published"}, {"timestamp": "2023-12-15T01:15:08.140Z", "date_only": false, "value": "2023-12-15T01:15:08.140", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-6831", "record": "GSD-2023-6831", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-12-15T03:30:18Z", "date_only": false, "value": "2023-12-15T03:30:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-554W-XH4J-8W64", "record": "GHSA-554W-XH4J-8W64", "field": "published"}, {"timestamp": "2023-12-15T06:01:23.070Z", "date_only": false, "value": "2023-12-15T06:01:23.070106Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6831", "record": "GSD-2023-6831", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-21T19:16:57Z", "date_only": false, "value": "2023-12-21T19:16:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/157890", "record": "CVE-2023-6831", "field": "creation_timestamp", "uuid": "17b5913b-e532-4619-aa2e-3d033005e7a4", "content": "https://ift.tt/HFVExU1\nCVE-2023-6831 Exploit", "url": "https://t.me/ctinow/157890"}, {"timestamp": "2024-01-11T11:27:09Z", "date_only": false, "value": "2024-01-11T11:27:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/166457", "record": "CVE-2023-6831", "field": "creation_timestamp", "uuid": "ecfe7bab-bddf-4db7-81c2-f708dddf7a05", "content": "https://ift.tt/TdzfiBJ\nCVE-2023-6831 | mlflow up to 2.9.1 path traversal", "url": "https://t.me/ctinow/166457"}, {"timestamp": "2024-02-13T21:42:56.581Z", "date_only": false, "value": "2024-02-13T21:42:56.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2023-6831", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-13T22:15:45.633Z", "date_only": false, "value": "2024-02-13T22:15:45.633", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6831", "record": "GSD-2023-6831", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-14T00:26:12.242Z", "date_only": false, "value": "2024-02-14T00:26:12.242703+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2023-253", "record": "PYSEC-2023-253", "field": "modified"}, {"timestamp": "2024-02-14T15:08:04Z", "date_only": false, "value": "2024-02-14T15:08:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-554W-XH4J-8W64", "record": "GHSA-554W-XH4J-8W64", "field": "modified"}, {"timestamp": "2024-03-06T10:57:09.481Z", "date_only": false, "value": "2024-03-06T10:57:09.481Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-6831", "record": "BIT-MLFLOW-2023-6831", "field": "published"}, {"timestamp": "2024-04-18T05:53:41Z", "date_only": false, "value": "2024-04-18T05:53:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4699", "record": "CVE-2023-6831", "field": "creation_timestamp", "uuid": "35547d2b-def6-4244-b1c9-0b8434ee9524", "content": "#ExploitObserverAlert\n\nCVE-2024-1560\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1560. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and `local_file_uri_to_path` function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the `delete_artifacts` function of `local_artifact_repo.py`, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "url": "https://t.me/arpsyndicate/4699"}, {"timestamp": "2024-08-02T08:42:07.635Z", "date_only": false, "value": "2024-08-02T08:42:07.635Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-6831", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T08:42:07.635Z", "date_only": false, "value": "2024-08-02T08:42:07.635Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-6831", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:51:30.177Z", "date_only": false, "value": "2026-06-17T06:51:30.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6831", "record": "FKIE_CVE-2023-6831", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-6831", "record": "BIT-MLFLOW-2023-6831", "field": "modified"}]}