Hugging Face's logo

mscgo77
/
coreml-path-traversal-poc

Model card Files
xet
 Community

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

Core ML Path Traversal PoC

Crafted .mlpackage with path traversal in Manifest.json path field.

Usage 

pip install coremltools torch
python poc_coreml_path_traversal.py

Root Cause

ModelPackage.cpp line 308/466: m_packageDataDirPath / path without canonicalization.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support