Path Traversal: '\..\filename'

Summary

A Local File Inclusion (LFI) vulnerability was identified in mlflow. This vulnerability arises from the application's failure to properly validate URI fragments for Directory Traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks. This issue affects mlflow package versions prior to 2.11.3.