Description
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook.
The vulnerability stems from lack of sanitization over template variables.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | mlflow | ≤ 2.9.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mlflow | < 2.10.0 | 2.10.0 | GHSA-6749-m5cp-6cg7 |