Skip to content
OpenAdvisories

Product · MLflow

mlflow/mlflow

55 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-8859 Public exploit Scanner template

    Path Traversal in mlflow/mlflow

    A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the pat…

    MLflow mlflow/mlflow mlflow PyPI
  • High 7.5
    CVE-2024-2928 Public exploit Scanner template EPSS 22%

    Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

    A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal s…

    MLflow mlflow/mlflow mlflow PyPI