high7.5
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Impact
This vulnerability enables malicious users to read sensitive files on the server.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | mlflow | < 2.9.2 | 2.9.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lfprojects | Mlflow | from 1.0.0 before 2.9.2 |