3 matches found
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
8.8CVSS7.2AI score0.00618EPSS
SaveExploits1
CVE-2024-37057 vulnerabilities
Vulnerabilities for packages: mlflow...
8.8CVSS9AI score0.00618EPSS
SaveExploits1
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
8.8CVSS6AI score0.00618EPSS
SaveExploits1References1
20