Lucene search
+L

10786 matches found

Github Security Blog
Github Security Blog
added 2026/05/19 12:31 p.m.25 views

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS6.1AI score0.00384EPSS
SaveExploits1References4Affected Software1
Snyk
Snyk
added 2026/05/19 11:54 a.m.14 views

Origin Validation Error

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Origin Validation Error in the /ajax-api endpoints. An attacker ca...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/05/19 11:54 a.m.9 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the /ajax-api endpoints. An attacker can gain unauthorized access to the Assistant's configuration and execute arbitrary commands by sending crafted cross-origin requests from a malicious webpage. Remediation...

9.6CVSS7.5AI score0.00384EPSS
SaveExploits1References2
NVD
NVD
added 2026/05/19 10:16 a.m.26 views

CVE-2026-2611

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS0.00384EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/05/19 9:16 a.m.10 views

CVE-2026-2611 Improper Origin Validation in mlflow/mlflow

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References2
OSV
OSV
added 2026/05/19 9:16 a.m.12 views

CVE-2026-2611 Improper Origin Validation in mlflow/mlflow

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS7.5AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/05/19 9:16 a.m.53 views

CVE-2026-2611 Improper Origin Validation in mlflow/mlflow

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS0.00384EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/05/19 9:16 a.m.24 views

EUVD-2026-30853

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/05/19 9:16 a.m.9 views

CVE-2026-2611

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. ...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References3
CVE
CVE
added 2026/05/19 9:16 a.m.77 views

CVE-2026-2611

Vulnerability summary (CVE-2026-2611) : In MLflow 3.9.0, the MLflow Assistant’s /ajax-api endpoints had improper origin validation, allowing remote attackers to bypass the loopback-only restriction via cross-origin requests from malicious pages. This could let an attacker interact with the MLflow...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/05/19 2:46 a.m.23 views

MGASA-2026-0150 Updated perl-libwww-perl & perl-HTTP-Message packages fix security vulnerabilities

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/19 12:00 a.m.21 views

PT-2026-41843

Name of the Vulnerable Software and Affected Versions MLflow version 3.9.0 Description The MLflow Assistant feature contains improper origin validation in its '/ajax-api' endpoints. This allows a remote attacker to use cross-origin requests from a malicious webpage to interact with an MLflow...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References16
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.19 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions prior to 148.0.7778.179, there was a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation, which could allow remote attackers to exploit the system by leaking cross-source data...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/19 12:00 a.m.24 views

PT-2026-42236

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179 Description Insufficient policy enforcement in ServiceWorker allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. A ServiceWorker is a script that the browser...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References23
Snyk
Snyk
added 2026/05/18 4:42 p.m.13 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the propagatedHeaders method during cross-origin redirects,...

7.4CVSS5.8AI score0.00322EPSS
SaveExploits1References2
OSV
OSV
added 2026/05/18 4:42 p.m.14 views

GHSA-FMXF-PM6P-7XGM async-http-client: Cookie header not stripped on cross-origin redirect

Summary async-http-client leaks Cookie headers to cross-origin redirect targets. When following a redirect across a security boundary different origin, or HTTPS→HTTP downgrade, the propagatedHeaders method in Redirect30xInterceptor.java strips Authorization and Proxy-Authorization headers but doe...

7.4CVSS5.8AI score0.00322EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/05/18 4:42 p.m.26 views

async-http-client: Cookie header not stripped on cross-origin redirect

Summary async-http-client leaks Cookie headers to cross-origin redirect targets. When following a redirect across a security boundary different origin, or HTTPS→HTTP downgrade, the propagatedHeaders method in Redirect30xInterceptor.java strips Authorization and Proxy-Authorization headers but doe...

7.4CVSS5.8AI score0.00322EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/05/18 1:31 p.m.18 views

GHSA-79CF-XCQC-C78W webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

Impact When webpack-dev-server is running on a non-HTTPS origin the default, cross-origin requests from malicious websites can load the dev server's JavaScript bundles via tags. The fix introduced in v5.2.1 CVE-2025-30359 relied on Sec-Fetch-Mode and Sec-Fetch-Site request headers to block these...

5.3CVSS5.9AI score0.00216EPSS
SaveExploits2References6
Github Security Blog
Github Security Blog
added 2026/05/18 1:31 p.m.61 views

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

Impact When webpack-dev-server is running on a non-HTTPS origin the default, cross-origin requests from malicious websites can load the dev server's JavaScript bundles via tags. The fix introduced in v5.2.1 CVE-2025-30359 relied on Sec-Fetch-Mode and Sec-Fetch-Site request headers to block these...

6.5CVSS6.5AI score0.00427EPSS
SaveExploits4References6Affected Software1
EUVD
EUVD
added 2026/05/18 1:31 p.m.33 views

EUVD-2026-29404

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits2References5
Rows per page
Query Builder