~ / search / GHSA-wjq3-7jxx-whj9

GHSA-wjq3-7jxx-whj9

mlflow Path Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-2780

Packages

EcosystemPackageAffectedFixed in
PyPI mlflow < 2.3.0 2.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

mlflow prior to 2.3.0 is vulnerable to path traversal due to a bypass of the fix for CVE-2023-1177.

References

External links from the advisory. They lead to third-party sites.