An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
References
Link | Resource |
---|---|
https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
24 Nov 2023, 23:09
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-16 21:15
Updated : 2024-02-05 00:22
NVD link : CVE-2023-6014
Mitre link : CVE-2023-6014
CVE.ORG link : CVE-2023-6014
JSON object : View
Products Affected
lfprojects
- mlflow
CWE