VULNERABILITY INTELLIGENCE

CVE-2023-5245

CVSS score7.5 HIGH

EPSS probability1.19%

CISA KEVNot currently listed

Published2023-11-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract(). Arbitrary file creation can directly lead to code execution

Weakness classification

reefs@jfrog.com: CWE-22

Primary references

reefs@jfrog.com — Issue Tracking, Patch
reefs@jfrog.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory