Mlflow CVE-2023-43472

Server-side request forgery in MLflow before 3.15.0 lets remote unauthenticated attackers coerce the server into making

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. Rated high severity (CVSS 7.5), this vulnerabilit

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. Rated critical severity (CVSS 10.0), this vul

MLflow's FastAPI job endpoints bypass basic-auth entirely, allowing network attackers to submit and execute jobs without

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it cou

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment. Rated critical s

An attacker can overwrite any file on the server hosting MLflow without any authentication. Rated critical severity (CVS

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. Rated critical severity (CVSS 9.8), th

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. Rated critical severity (CVSS 9.8), th

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. Rated critical se

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. Rated critical severity (CVSS 9.6), t