Unknown
osv
·
PYSEC-2023-70
PYSEC-2023-70
Published May 11, 2023
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
Affected AI Products
mlflow