Alta
CVE-2024-37055
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 84
Restablecer filtros
Alta
CVE-2024-37056
MLFlow unsafe deserialization
Alta
CVE-2024-37053
MLFlow unsafe deserialization
Media
CVE-2024-4263
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises
Alta
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of ar
Crítica
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Alta
CVE-2024-1560
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1594
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1593
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1558
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1483
mlflow Path Traversal vulnerability
Crítica
CVE-2024-27133
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerabil
Crítica
CVE-2024-27132
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
Alta
CVE-2023-6976
MLflow Path Traversal Vulnerability
Alta
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Crítica
CVE-2023-6974
MLflow Server-Side Request Forgery (SSRF)
Crítica
CVE-2023-6975
MLFlow Path Traversal Vulnerability
Alta
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Alta
CVE-2023-6940
mlflow Command Injection vulnerability
Alta
CVE-2023-6831
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Alta
CVE-2023-6753
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
Alta
CVE-2023-6709
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
Media
CVE-2023-6568
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malici
Alta
CVE-2023-43472
Information exposure in MLflow
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.