Vulners
Lucene search
3 matches found
Local File Inclusion in mlflow
A Local File Inclusion LFI vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can...
7.5CVSS7.5AI score0.9165EPSS
Exploits2References5Affected Software1
CVE-2024-2928
A Local File Inclusion LFI vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can...
7.5CVSS0.9165EPSS
Exploits2References2
CVE-2024-2928
Summary: MLflow
7.5CVSS7.4AI score0.9165EPSS
Exploits2References2Affected Software1
20