Filter
pip/mlflowExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
7
First published (updated )
pip/mlflowLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow
7.5
First published (updated )
pip/mlflowRemote Code Execution due to Full Controlled File Write in mlflow/mlflow
10
First published (updated )
pip/mlflowDenial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.…
8.8
EPSS
0.04%
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0…
8.8
EPSS
0.04%
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0…
8.8
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0…
8.8
EPSS
0.04%
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.…
8.8
EPSS
0.04%
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0…
8.8
EPSS
0.04%
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0…
8.8
First published (updated )
pip/mlflowDeserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0…
8.8
First published (updated )
pip/mlflowImproper Access Control in mlflow/mlflow
5.4
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/mlflowPath Traversal Bypass in mlflow/mlflow
7.5
EPSS
0.04%
First published (updated )
pip/mlflowLocal File Read via Path Traversal in mlflow/mlflow
7.5
First published (updated )
pip/mlflowPath Traversal Vulnerability in mlflow/mlflow
7.5
First published (updated )
pip/mlflowPath Traversal via Parameter Smuggling in mlflow/mlflow
7.5
First published (updated )
pip/mlflowPath Traversal Vulnerability in mlflow/mlflow
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/mlflowLocal File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow
9.3
EPSS
0.04%
First published (updated )
pip/mlflowPath Traversal Vulnerability in mlflow/mlflow
8.1
First published (updated )
pip/mlflowInsufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.
9.7
EPSS
0.04%
First published (updated )
pip/mlflowInsufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
9.7
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/mlflowUnrestricted Upload of File with Dangerous Type
8.8
EPSS
0.05%
First published (updated )
pip/mlflowServer-Side Request Forgery (SSRF)
9.8
EPSS
0.26%
First published (updated )
pip/mlflowPath Traversal: '\..\filename' in mlflow/mlflow
7.5
EPSS
0.08%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.