Mlflow

CVEs (76)

• CVE-2024-37058Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37057Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37056Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37055Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37054Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37053Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-37052Jun 4, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.

• CVE-2024-4263May 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.00

  A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT…

• CVE-2024-3848May 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.43

  A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the…

• CVE-2024-3573Apr 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file'…

• CVE-2024-1558Apr 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  A path traversal vulnerability exists in the `_create_model_version()` function within `server/handlers.py` of the mlflow/mlflow repository, due to improper validation of the `source` parameter. Attackers can exploit this vulnerability by crafting a `source` parameter that…

• CVE-2024-1594Apr 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to…

• CVE-2024-1593Apr 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files…

• CVE-2024-1560Apr 16, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and…

• CVE-2024-27133Feb 23, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.

• CVE-2024-27132Feb 23, 2024
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over template variables.

• CVE-2023-6977Dec 20, 2023
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.04

  This vulnerability enables malicious users to read sensitive files on the server.

• CVE-2023-6976Dec 20, 2023
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.01

  This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.

• CVE-2023-6975Dec 20, 2023
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.02

  A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

• CVE-2023-6974Dec 20, 2023
  Mlflow

  Mlflow
  risk 0.00cvss —epss 0.02

  A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.