Low
osv
·
GHSA-wqxf-447m-6f5f
Information exposure in MLflow
Published Dec 5, 2023
CVSS 3.1
An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.
Affected AI Products
mlflow