CVE-2023-6977

Description

This vulnerability enables malicious users to read sensitive files on the server.

Affected packages (2)

• Bitnami/mlflow>= 1.0.0, < 2.9.2
• PyPI/mlflowfrom 0, < 2.9.2

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-6977
• PATCHhttps://github.com/mlflow/mlflow
• WEBhttps://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c
• WEBhttps://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf