CVE-2024-1558

A path traversal vulnerability exists in the "createmodelversion" function within "server/handlers.py" of the mlflow/mlflow repository, due to improper validation of the "source" parameter. Attackers can exploit this vulnerability by crafting a "source" parameter that bypasses the...