Mflow vulnerabilities
We track 1 vulnerability in Mflow products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 16, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Mflow vulnerabilities
- 7.5 High severity
mlflow/mlflow: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifact_location' and 'source' parameters, using a local URI w