Lucene search

GitHub Advisory DatabaseGHSA-7P8J-QV6X-F4G4

HistoryJun 04, 2024 - 12:31 p.m.

MLFlow unsafe deserialization

2024-06-0412:31:04

CWE-502

GitHub Advisory Database

github.com

mlflow platform

unsafe deserialization

untrusted data

lightgbm

scikit-learn

arbitrary code

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with.

Affected configurations

Vulners

Node

mlflowmlflowRange1.23.0–2.14.1

VendorProductVersionCPE
mlflowmlflow*cpe:2.3:a:mlflow:mlflow:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mlflow	mlflow	*	cpe:2.3:a:mlflow:mlflow::::::::

References

github.com/advisories/GHSA-7p8j-qv6x-f4g4

hiddenlayer.com/sai-security-advisory/mlflow-june2024

nvd.nist.gov/vuln/detail/CVE-2024-37056

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for GHSA-7P8J-QV6X-F4G4