VYPR
Critical severityNVD Advisory· Published Nov 16, 2023· Updated Aug 2, 2024

MLflow Arbitrary File Upload

CVE-2023-6015

Description

MLflow allowed arbitrary files to be PUT onto the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mlflowPyPI
< 2.8.12.8.1

Affected products

3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.