Lfprojects: >> Mlflow >> 2.3.0 Security Vulnerabilities
MLflow allowed arbitrary files to be PUT onto the server.
CVSS Score
10.0
EPSS Score
0.044
Published
2023-11-16
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
CVSS Score
8.8
EPSS Score
0.013
Published
2023-08-01
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
CVSS Score
10.0
EPSS Score
0.675
Published
2023-07-19
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
CVSS Score
9.8
EPSS Score
0.064
Published
2023-05-17
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
CVSS Score
10.0
EPSS Score
0.042
Published
2023-04-28
Page 6