mlflow

87 results · Feed

• Critical 9.8
  CVE-2023-2780 Scanner template

  Path Traversal: '\..\filename' in mlflow/mlflow

  Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.

  MLflow mlflow/mlflow mlflow PyPI
  May 17, 2023
• High 7.5
  CVE-2023-30172

  mflow vulnerable to directory traversal

  A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

  mlflow PyPI
  May 11, 2023
• Critical —
  GHSA-83fm-w79m-64r5

  Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs

  ### Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the ``mlflow server`` or ``mlflow ui`` commands using an MLflow version older than **MLflow 2.3.1** may be vulnerable to a remote file access exploit if they ar…

  mlflow PyPI
  May 1, 2023
• Critical 10.0
  CVE-2023-2356 Scanner template

  Relative Path Traversal in mlflow/mlflow

  Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.

  MLflow mlflow/mlflow mlflow PyPI
  Apr 28, 2023
• Medium 5.3
  CVE-2023-1176

  Absolute Path Traversal in mlflow/mlflow

  Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

  MLflow mlflow/mlflow mlflow PyPI
  Mar 24, 2023
• Critical 9.3
  CVE-2023-1177 Public exploit Scanner template EPSS 70%

  Path Traversal: '\..\filename' in mlflow/mlflow

  Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

  MLflow mlflow/mlflow mlflow PyPI
  Mar 24, 2023
• High 8.2
  CVE-2022-0736

  Insecure Temporary File in mlflow/mlflow

  Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

  MLflow mlflow/mlflow mlflow PyPI
  Feb 23, 2022