Server Side Request Forgery (SSRF)

🗓️ 25 Jun 2025 06:29:09Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

mlflow has a vulnerability allowing request path manipulation due to missing input validation.

Reporter	Title	Published	Views	Family All 23
Huntr	SSRF in MLflow via user-controlled gateway_path parameter	25 Jun 202506:25	–	huntr
Huntr	SSRF in MLflow via user-controlled webhook URL parameter	10 Feb 202616:29	–	huntr
IBM Security Bulletins	Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.	2 Feb 202604:24	–	ibm
BDU FSTEC	The vulnerability of the gateway_proxy_handler component in the machine learning lifecycle management platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	28 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-52967	23 Jun 202514:45	–	circl
CNNVD	MLflow 代码问题漏洞	23 Jun 202500:00	–	cnnvd
CVE	CVE-2025-52967	23 Jun 202500:00	–	cve
Cvelist	CVE-2025-52967	23 Jun 202500:00	–	cvelist
EUVD	EUVD-2025-18888	3 Oct 202520:07	–	euvd
Github Security Blog	MLFlow SSRF via gateway_proxy_handler	23 Jun 202515:31	–	github

Vulners

Node

mlflow mlflowRange2.7.0–3.0.0python

mlflow mlflowMatch3.0.0rc0python

mlflow mlflowMatch3.0.0rc1python

mlflow mlflowMatch3.0.0rc2python

mlflow mlflowMatch3.0.0rc3python

mlflow mlflowMatch3.0.1python

mlflow mlflowMatch3.1.0rc0python

mlflow mlflowMatch0.0.1python

mlflow mlflowMatch0.1.0python

mlflow mlflowMatch0.2.0python

mlflow mlflowMatch0.2.1python

mlflow mlflowMatch0.3.0python

mlflow mlflowMatch0.4.0python

mlflow mlflowMatch0.4.1python

mlflow mlflowMatch0.4.2python

mlflow mlflowMatch0.5.0python

mlflow mlflowMatch0.5.1python

mlflow mlflowMatch0.5.2python

mlflow mlflowMatch0.6.0python

mlflow mlflowMatch0.7.0python

mlflow mlflowMatch0.8.0python

mlflow mlflowMatch0.8.1python

mlflow mlflowMatch0.8.2python

mlflow mlflowMatch0.9.0python

mlflow mlflowMatch0.9.0.1python

mlflow mlflowMatch0.9.1python

mlflow mlflowMatch1.0.0python

mlflow mlflowMatch1.1.0python

mlflow mlflowMatch1.1.1.dev0python

mlflow mlflowMatch1.10.0python

mlflow mlflowMatch1.11.0python

mlflow mlflowMatch1.12.0python

mlflow mlflowMatch1.12.1python

mlflow mlflowMatch1.13python

mlflow mlflowMatch1.13.1python

mlflow mlflowMatch1.14.0python

mlflow mlflowMatch1.14.1python

mlflow mlflowMatch1.15.0python

mlflow mlflowMatch1.16.0python

mlflow mlflowMatch1.17.0python

mlflow mlflowMatch1.18.0python

mlflow mlflowMatch1.19.0python

mlflow mlflowMatch1.2.0python

mlflow mlflowMatch1.20.0python

mlflow mlflowMatch1.20.1python

mlflow mlflowMatch1.20.2python

mlflow mlflowMatch1.21.0python

mlflow mlflowMatch1.22.0python

mlflow mlflowMatch1.23.0python

mlflow mlflowMatch1.23.1python

mlflow mlflowMatch1.24.0python

mlflow mlflowMatch1.25.0python

mlflow mlflowMatch1.25.1python

mlflow mlflowMatch1.26.0python

mlflow mlflowMatch1.26.1python

mlflow mlflowMatch1.27.0python

mlflow mlflowMatch1.28.0python

mlflow mlflowMatch1.29.0python

mlflow mlflowMatch1.3.0python

mlflow mlflowMatch1.30.0python

mlflow mlflowMatch1.30.1python

mlflow mlflowMatch1.4.0python

mlflow mlflowMatch1.5.0python

mlflow mlflowMatch1.6.0python

mlflow mlflowMatch1.7.0python

mlflow mlflowMatch1.7.1python

mlflow mlflowMatch1.7.2python

mlflow mlflowMatch1.8.0python

mlflow mlflowMatch1.9.0python

mlflow mlflowMatch1.9.1python

mlflow mlflowMatch2.0.0python

mlflow mlflowMatch2.0.0rc0python

mlflow mlflowMatch2.0.1python

mlflow mlflowMatch2.1.0python

mlflow mlflowMatch2.1.1python

mlflow mlflowMatch2.10.0python

mlflow mlflowMatch2.10.1python

mlflow mlflowMatch2.10.2python

mlflow mlflowMatch2.11.0python

mlflow mlflowMatch2.11.1python

mlflow mlflowMatch2.11.2python

mlflow mlflowMatch2.11.3python

mlflow mlflowMatch2.11.4python

mlflow mlflowMatch2.12.0python

mlflow mlflowMatch2.12.1python

mlflow mlflowMatch2.12.2python

mlflow mlflowMatch2.13.0python

mlflow mlflowMatch2.13.1python

mlflow mlflowMatch2.13.2python

mlflow mlflowMatch2.14.0python

mlflow mlflowMatch2.14.0rc0python

mlflow mlflowMatch2.14.1python

mlflow mlflowMatch2.14.2python

mlflow mlflowMatch2.14.2.dev0python

mlflow mlflowMatch2.14.3python

mlflow mlflowMatch2.15.0python

mlflow mlflowMatch2.15.0rc0python

mlflow mlflowMatch2.15.1python

mlflow mlflowMatch2.16.0python

mlflow mlflowMatch2.16.1python

mlflow mlflowMatch2.16.2python

mlflow mlflowMatch2.17.0python

mlflow mlflowMatch2.17.0rc0python

mlflow mlflowMatch2.17.1python

mlflow mlflowMatch2.17.2python

mlflow mlflowMatch2.18.0python

mlflow mlflowMatch2.18.0rc0python

mlflow mlflowMatch2.19.0python

mlflow mlflowMatch2.19.0rc0python

mlflow mlflowMatch2.2.0python

mlflow mlflowMatch2.2.1python

mlflow mlflowMatch2.2.2python

mlflow mlflowMatch2.20.0python

mlflow mlflowMatch2.20.0rc0python

mlflow mlflowMatch2.20.1python

mlflow mlflowMatch2.20.2python

mlflow mlflowMatch2.20.3python

mlflow mlflowMatch2.20.4python

mlflow mlflowMatch2.21.0python

mlflow mlflowMatch2.21.0rc0python

mlflow mlflowMatch2.21.1python

mlflow mlflowMatch2.21.2python

mlflow mlflowMatch2.21.3python

mlflow mlflowMatch2.22.0python

mlflow mlflowMatch2.22.0rc0python

mlflow mlflowMatch2.22.1python

mlflow mlflowMatch2.3.0python

mlflow mlflowMatch2.3.1python

mlflow mlflowMatch2.3.2python

mlflow mlflowMatch2.4.0python

mlflow mlflowMatch2.4.1python

mlflow mlflowMatch2.4.2python

mlflow mlflowMatch2.5.0python

mlflow mlflowMatch2.6.0python

mlflow mlflowMatch2.7.0python

mlflow mlflowMatch2.7.1python

mlflow mlflowMatch2.8.0python

mlflow mlflowMatch2.8.1python

mlflow mlflowMatch2.9.0python

mlflow mlflowMatch2.9.1python

mlflow mlflowMatch2.9.2python

mlflow mlflowRange3.0.0rc0–3.1.0rc0python

mlflow mlflowRange0.0.1–2.22.1python

Source	Link
github	www.github.com/mlflow/mlflow/issues/15944
github	www.github.com/mlflow/mlflow/pull/15970
github	www.github.com/mlflow/mlflow/releases/tag/v3.1.0
github	www.github.com/mlflow/mlflow/releases/tag/v2.22.2
github	www.github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2025-52.yaml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-52967
github	www.github.com/mlflow/mlflow

03 Jun 2026 09:59Current

7High risk

Vulners AI Score7

CVSS 3.15.8

EPSS0.00247

SSVC