Lfprojects
Page 2 of 2 — Lfprojects CVEs from a corpus of 115, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6014 | Critical | 9.8 | 2023-11-16 | An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment. |
CVE-2023-6018 | Critical | 9.8 | 2023-11-16 | An attacker can overwrite any file on the server hosting MLflow without any authentication. |
CVE-2023-6015 | High | 7.5 | 2023-11-16 | MLflow allowed arbitrary files to be PUT onto the server. |
CVE-2023-4033 | High | 7.8 | 2023-08-01 | OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. |
CVE-2023-38496 | Medium | 6.1 | 2023-07-25 | Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore… |
CVE-2023-3765 | Critical | 10.0 | 2023-07-19 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. |
CVE-2023-2780 | Critical | 9.8 | 2023-05-17 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. |
CVE-2023-30172 | High | 7.5 | 2023-05-11 | A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server… |
CVE-2023-2356 | High | 7.5 | 2023-04-28 | Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. |
CVE-2023-30549 | High | 7.1 | 2023-04-25 | Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and in… |
CVE-2022-46397 | High | 7.5 | 2023-03-28 | FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode. |
CVE-2023-1177 | Critical | 9.3 | 2023-03-24 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. |
CVE-2023-1176 | Low | 3.3 | 2023-03-24 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. |
CVE-2023-23619 | Critical | 9.9 | 2023-01-26 | Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to… |
CVE-2022-0736 | High | 7.5 | 2022-02-23 | Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. |