Low
osv
·
GHSA-4qq5-mxxx-m6gg
MLflow authentication requirement bypass can allow a user to arbitrarily create an account
Published Nov 16, 2023
CVSS 3.0
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement.
Affected AI Products
mlflow