High
CVE-2024-37055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 84
Reset filters
High
CVE-2024-37056
MLFlow unsafe deserialization
High
CVE-2024-37053
MLFlow unsafe deserialization
Medium
CVE-2024-4263
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises
High
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of ar
Critical
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
High
CVE-2024-1560
mlflow vulnerable to Path Traversal
High
CVE-2024-1594
mlflow vulnerable to Path Traversal
High
CVE-2024-1593
mlflow vulnerable to Path Traversal
High
CVE-2024-1558
mlflow vulnerable to Path Traversal
High
CVE-2024-1483
mlflow Path Traversal vulnerability
Critical
CVE-2024-27133
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerabil
Critical
CVE-2024-27132
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
High
CVE-2023-6976
MLflow Path Traversal Vulnerability
High
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Critical
CVE-2023-6974
MLflow Server-Side Request Forgery (SSRF)
Critical
CVE-2023-6975
MLFlow Path Traversal Vulnerability
High
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
High
CVE-2023-6940
mlflow Command Injection vulnerability
High
CVE-2023-6831
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
High
CVE-2023-6753
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
High
CVE-2023-6709
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
Medium
CVE-2023-6568
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malici
High
CVE-2023-43472
Information exposure in MLflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.