CVE-2025-1473

A Cross-Site Request Forgery CSRF vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user...

api-python-bet-project (>=0.1.9, <=0.1.22), argosml (>=0.0.1, <=0.1.3) +97 more potentially affected by CVE-2025-1473 via mlflow (>=2.0.0rc0, <=2.20.1)

mlflow PYPI version =2.0.0rc0, =0.1.9, =0.0.1, =1.0.0, =1.0.4, =1.0.1, =0.1.0, =0.0.4, =0.1.3, =0.1.2, =1.2.0, =0.8.0, =0.10.0 and more Source cves: CVE-2025-1473 Source advisory: SNYK:PYTHON-MLFLOW-9486736...

CVE-2025-1473

A Cross-Site Request Forgery CSRF vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user...

CVE-2025-1473

In MLflow (mlflow/mlflow), a CSRF vulnerability affects versions 2.17.0 to 2.20.1 in the Signup feature, allowing an attacker to create a new account and potentially perform unauthorized actions on behalf of the attacker’s account. The CVE-2025-1473 entry documents the flaw and its impact as Cros...

CVE-2025-1473 CSRF in mlflow/mlflow

A Cross-Site Request Forgery CSRF vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user...