Description
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | mlflow | ≤ 2.9.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mlflow | < 2.10.0 | 2.10.0 | GHSA-3v79-q7ph-j75h |