{"vulnerability": "cve-2023-6909", "sightings": [{"uuid": "204b9d34-4ed3-488a-acff-421cd5146894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/ctinow/156875", "content": "https://ift.tt/OFrMReH\nCVE-2023-6909 Exploit", "creation_timestamp": "2023-12-20T11:17:57.000000Z"}, {"uuid": "1d085e9a-1166-4aa4-a65b-f15c180f90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "Telegram/r1wKJXjH2pTO0xeaSE1QheSc4QAYiX6QzNohFiLFxNX558lD", "content": "", "creation_timestamp": "2025-02-06T02:39:18.000000Z"}, {"uuid": "74894495-1f44-421c-8a4c-845c17df4de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/arpsyndicate/4711", "content": "#ExploitObserverAlert\n\nCVE-2024-1594\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1594. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "creation_timestamp": "2024-04-18T06:48:53.000000Z"}, {"uuid": "3087529a-9cb2-46eb-a50e-0e4e1b57b417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "seen", "source": "https://t.me/ctinow/167138", "content": "https://ift.tt/wTlG48E\nCVE-2023-6909 | mlflow up to 2.9.1 path traversal", "creation_timestamp": "2024-01-12T09:11:38.000000Z"}, {"uuid": "14e921ec-0935-4201-9e80-a2577d267d6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/14b605c4-9d49-490a-8762-9bd407e96f72", "content": "", "creation_timestamp": "2026-06-19T12:42:04.418135Z"}, {"uuid": "e1c85aca-6c35-48ce-a064-d2e1df6fdb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-6909", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:09.156250Z"}, {"uuid": "4bce290d-34ca-4082-addb-2e44a4378e55", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-6909", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8d22024b-e155-4586-8605-f179ef65516d", "content": "", "creation_timestamp": "2026-07-01T05:54:15.345078Z"}, {"uuid": "96738dab-a563-4a4c-8b97-5fab7b628131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-6909", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:31.028902Z"}]}