Vertaai/modeldb - Path Traversal (CVE-2023-6023)
Description
An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
psychologyCrowdSec Analysis
CVE-2023-6023 is a vulnerability affecting ModelDB, allowing attackers to read arbitrary files from the server’s filesystem via a crafted request exploiting a path traversal weakness.
CrowdSec has been tracking this vulnerability and its exploits since 7th of May 2025.
Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2023-6023 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. Data from the CrowdSec community also indicates a gradual decrease in attacks targeting CVE-2023-6023. While still present in the wild, exploitation levels have dropped noticeably week-over-week. This may signal that the vulnerability is becoming less relevant or that defenses are improving fast enough for attackers to lose interest.
Observed exploitation attempts focus on URLs containing /api/v1/artifact/getartifact.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2023-11-16 |
| Rule Released | 2025-05-07 |
| CrowdSec First Seen | 2025-05-07 |