Lfprojects: >> Mlflow >> 2.1.1 Security Vulnerabilities
MLflow allowed arbitrary files to be PUT onto the server.
CVSS Score
10.0
EPSS Score
0.008
Published
2023-11-16
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
CVSS Score
8.8
EPSS Score
0.002
Published
2023-08-01
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
CVSS Score
10.0
EPSS Score
0.915
Published
2023-07-19
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
CVSS Score
9.8
EPSS Score
0.868
Published
2023-05-17
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
CVSS Score
10.0
EPSS Score
0.899
Published
2023-04-28
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
CVSS Score
5.3
EPSS Score
0.002
Published
2023-03-24
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
CVSS Score
9.3
EPSS Score
0.933
Published
2023-03-24
Page 5