CVE-2023-6977

描述

This vulnerability enables malicious users to read sensitive files on the server.

受影響套件(2)

• Bitnami/mlflow>= 1.0.0, < 2.9.2
• PyPI/mlflowfrom 0, < 2.9.2

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-6977
• PATCHhttps://github.com/mlflow/mlflow
• WEBhttps://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c
• WEBhttps://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf