Lucene search

GoogleOSV:BIT-MLFLOW-2024-37056

HistoryJun 08, 2024 - 7:26 a.m.

BIT-mlflow-2024-37056

2024-06-0807:26:02

Google

osv.dev

deserialization

untrusted data

mlflow

lightgbm

scikit-learn

arbitrary code

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with.

References

hiddenlayer.com/sai-security-advisory/mlflow-june2024

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for OSV:BIT-MLFLOW-2024-37056