Low
osv
·
GHSA-wc6j-5g83-xfm6
mflow vulnerable to directory traversal
Published May 11, 2023
CVSS 3.1
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform prior to v2.0.0 allows attackers to read arbitrary files on the server via the path parameter.
Affected AI Products
mlflow