VYPR
Critical severityNVD Advisory· Published Nov 16, 2023· Updated Aug 2, 2024

MLflow Arbitrary File Write

CVE-2023-6018

Description

An attacker can overwrite any file on the server hosting MLflow without any authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mlflowPyPI
< 2.9.22.9.2

Affected products

3

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.