MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Command Injection in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0

Missing Authentication for Critical Function in mlflow/mlflow

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim…

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment

An attacker can overwrite any file on the server hosting MLflow without any authentication

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1

Improper Origin Validation in mlflow/mlflow

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system

Path Traversal Vulnerability in mlflow/mlflow

Missing Authorization Validation in mlflow/mlflow