CVE

CVE-2023-6023

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

vertaai/modeldb

Updated Sep 18, 2026View on NVD →

S4E scanner

CVE-2023-6023 Scanner

Detects 'Path Traversal' vulnerability in VertaAI ModelDB affects v. Unknown.

Used 3.1k times · 5.9k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.