'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_other:mlflow_path_traversal_vulnerability（Rule ID：1070310218）

Release Date：2025/9/15

Rule Name：CVE-2024-1483,CVE-2024-2928,CVE-2024-3848,CVE-2023-6909,CVE-2024-1594:Mlflow Path Traversal Vulnerability

Severity：critical

CVE ID：CVE-2024-1483 CVE-2024-2928 CVE-2024-3848 CVE-2023-6909 CVE-2024-1594

 

Descripiton：

Mlflow is an open source machine learning lifecycle management platform designed to simplify the development, tracking, deployment, and management of machine learning projects. It supports the entire machine learning workflow from experiment tracking, model registration, model deployment to project packaging. An attacker could exploit the vulnerability to access files and directories stored outside of the web root folder. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.