Skip to content

Lfprojects Mlflow vulnerabilities

lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal via Parameter Smuggling in mlflow/mlflowCVE-2024-1593Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1558Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow, mflow +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1483Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1560Fix available8.1 HighApril 16, 2024
lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.CVE-2024-27133Fix available7.5 HighFebruary 23, 2024
lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running an untrusted recipe.CVE-2024-27132Fix available7.5 HighFebruary 23, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6977Fix available10.0 CriticalDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreUnrestricted Upload of File with Dangerous TypeCVE-2023-6976Fix available8.8 HighDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6975Fix available9.8 CriticalDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreServer-Side Request Forgery (SSRF)CVE-2023-6974Fix available8.6 HighDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreCommand InjectionCVE-2023-6940Fix available9.0 CriticalDecember 19, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6909Fix availableEPSS 89.7%7.5 HighDecember 18, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6831Fix available8.1 HighDecember 15, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflowCVE-2023-6753Fix available9.6 CriticalDecember 13, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflowCVE-2023-6709Fix available10.0 CriticalDecember 12, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreReflected XSS via Content-Type Header in mlflow/mlflowCVE-2023-6568Fix available6.5 MediumDecember 7, 2023
lfprojects mlflowInformation exposure in MLflowCVE-2023-43472Fix availableEPSS 36.6%7.5 HighDecember 5, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Authentication BypassCVE-2023-6014Fix available9.1 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File UploadCVE-2023-6015Fix available10.0 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File WriteCVE-2023-6018Fix availableEPSS 47.9%10.0 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreOS Command Injection in mlflow/mlflowCVE-2023-4033Fix available8.8 HighAugust 1, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflowCVE-2023-3765Fix availableEPSS 67.3%10.0 CriticalJuly 19, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-2780Fix available9.8 CriticalMay 17, 2023
lfprojects mlflowmflow vulnerable to directory traversalCVE-2023-30172Fix available7.5 HighMay 11, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreRelative Path Traversal in mlflow/mlflowCVE-2023-2356Fix available10.0 CriticalApril 28, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-1177Public exploitFix availableEPSS 69.7%9.3 CriticalMarch 24, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflowCVE-2023-1176Fix available5.3 MediumMarch 24, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreInsecure Temporary File in mlflow/mlflowCVE-2022-0736Fix available8.2 HighFebruary 23, 2022