{"vulnerability": "cve-2024-1594", "sightings": [{"uuid": "ad1957e5-f46f-4d40-87aa-c0ae22325915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1594", "type": "seen", "source": "Telegram/r1wKJXjH2pTO0xeaSE1QheSc4QAYiX6QzNohFiLFxNX558lD", "content": "", "creation_timestamp": "2025-02-06T02:39:18.000000Z"}, {"uuid": "944eef6f-ce39-4605-9374-d7b29fca0099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1594", "type": "seen", "source": "https://t.me/arpsyndicate/4711", "content": "#ExploitObserverAlert\n\nCVE-2024-1594\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1594. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "creation_timestamp": "2024-04-18T06:48:53.000000Z"}, {"uuid": "327a61c2-5d51-44cd-81be-49312f1fb568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1594", "type": "seen", "source": "https://gist.github.com/skilfoy/dae3706a5b5da2e8b38f57b211c2d4a0", "content": "", "creation_timestamp": "2026-10-26T00:31:19.000000Z"}]}