high8.8
CVE-2023-6976
MLflow Path Traversal Vulnerability
Impact
This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | mlflow | < 2.9.2 | 2.9.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lfprojects | Mlflow | before 2.9.2 |