chore(deps): update dependency mlflow to v3 [security]

[anaconda-renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
mlflow	major	>=2.3.0 → >=3.11.1
mlflow	major	==2.6.0 → ==3.11.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

renovate update details

Field	Value
manager	pip_setup
categories	python
datasource	pypi
depName	mlflow
depType¹
packageName	mlflow
sourceUrl	https://github.com/mlflow/mlflow
updateType	major
versioning	pep440

¹ only available for some managers

---

MLflow authentication requirement bypass can allow a user to arbitrarily create an account

BIT-mlflow-2023-6014 / CVE-2023-6014 / GHSA-4qq5-mxxx-m6gg

More information

Details

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement.

Severity

• CVSS Score: 9.1 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6014
• https://github.com/mlflow/mlflow/issues/9669
• https://github.com/mlflow/mlflow/pull/9700
• https://github.com/mlflow/mlflow/commit/32de2154ef9f946160e5dc01a4d8a449dd0bd259
• https://github.com/mlflow/mlflow
• https://github.com/mlflow/mlflow/releases/tag/v2.8.0
• https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLflow allowed arbitrary files to be PUT onto the server

BIT-mlflow-2023-6015 / CVE-2023-6015 / GHSA-f798-qm4r-23r5

More information

Details

MLflow allowed arbitrary files to be PUT onto the server.

Severity

• CVSS Score: 10.0 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6015
• https://github.com/mlflow/mlflow/pull/10330
• https://github.com/mlflow/mlflow/commit/cf83dad4df26dd4a850622fe8a51ccab1471a5e7
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Remote code execution in mlflow

BIT-mlflow-2024-0520 / CVE-2024-0520 / GHSA-5q6c-ffvg-xcm9 / PYSEC-2024-239

More information

Details

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the mlflow.data.http_dataset_source.py module. Specifically, when loading a dataset from a source URL with an HTTP scheme, the filename extracted from the Content-Disposition header or the URL path is used to generate the final file path without proper sanitization. This flaw enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, such as '../../tmp/poc.txt' or '/tmp/poc.txt', leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information. The issue is fixed in version 2.9.0.

Severity

• CVSS Score: 10.0 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-0520
• https://github.com/mlflow/mlflow/commit/400c226953b4568f4361bc0a0c223511652c2b9d
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-239.yaml
• https://huntr.com/bounties/93e470d7-b6f0-409b-af63-49d3e2a26dbc

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Cross-site Scripting (XSS) in MLflow

BIT-mlflow-2023-6568 / CVE-2023-6568 / GHSA-vwhf-3v6x-wff8 / PYSEC-2023-260

More information

Details

A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/init.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.

Severity

• CVSS Score: 6.5 / 10 (Medium)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6568
• https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-260.yaml
• https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Information exposure in MLflow

BIT-mlflow-2023-43472 / CVE-2023-43472 / GHSA-wqxf-447m-6f5f

More information

Details

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-43472
• https://github.com/mlflow/mlflow
• https://mlflow.org/news/2023/12/06/2.9.0-release/index.html
• https://www.contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-security

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-0520 / CVE-2024-0520 / GHSA-5q6c-ffvg-xcm9 / PYSEC-2024-239

More information

Details

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the mlflow.data.http_dataset_source.py module. Specifically, when loading a dataset from a source URL with an HTTP scheme, the filename extracted from the Content-Disposition header or the URL path is used to generate the final file path without proper sanitization. This flaw enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, such as '../../tmp/poc.txt' or '/tmp/poc.txt', leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information. The issue is fixed in version 2.9.0.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://huntr.com/bounties/93e470d7-b6f0-409b-af63-49d3e2a26dbc
• https://github.com/mlflow/mlflow/commit/400c226953b4568f4361bc0a0c223511652c2b9d

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2023-6568 / CVE-2023-6568 / GHSA-vwhf-3v6x-wff8 / PYSEC-2023-260

More information

Details

A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/init.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.

Severity

• CVSS Score: 6.1 / 10 (Medium)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

• https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709
• https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

Path traversal in MLflow

BIT-mlflow-2023-6831 / CVE-2023-6831 / GHSA-554w-xh4j-8w64 / PYSEC-2023-253

More information

Details

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 10.0 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6831
• https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-253.yaml
• https://huntr.com/bounties/0acdd745-0167-4912-9d5c-02035fe5b314

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLflow Server-Side Request Forgery (SSRF)

BIT-mlflow-2023-6974 / CVE-2023-6974 / GHSA-59v3-898r-qwhj

More information

Details

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abused to get a remote code execution on the victim machine.

Severity

• CVSS Score: 9.8 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6974
• https://github.com/mlflow/mlflow/commit/8174250f83352a04c2d42079f414759060458555
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/438b0524-da0e-4d08-976a-6f270c688393

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow vulnerable to Path Traversal

BIT-mlflow-2024-1560 / CVE-2024-1560 / GHSA-5mvj-wmgj-7q8c

More information

Details

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the _delete_artifact_mlflow_artifacts handler and local_file_uri_to_path function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the delete_artifacts function of local_artifact_repo.py, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.

Severity

• CVSS Score: 8.1 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-1560
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/4a34259c-3c8f-4872-b178-f27fbc876b98

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Remote Code Execution due to Full Controled File Write in mlflow

BIT-mlflow-2023-6018 / CVE-2023-6018 / GHSA-5p3h-7fwh-92rc

More information

Details

The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting /home/<user>/.bashrc). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

Severity

• CVSS Score: 10.0 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6018
• https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLflow Path Traversal Vulnerability

BIT-mlflow-2023-6909 / CVE-2023-6909 / GHSA-5r3q-93q3-f978 / PYSEC-2023-252

More information

Details

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.7 / 10 (High)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6909
• https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-252.yaml
• https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Jinja2 template injection in mlflow

BIT-mlflow-2023-6709 / CVE-2023-6709 / GHSA-cxfr-5q3r-2rc2 / PYSEC-2023-281

More information

Details

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6709
• https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-281.yaml
• https://huntr.com/bounties/9e4cc07b-6fff-421b-89bd-9445ef61d34d

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow vulnerable to Path Traversal

BIT-mlflow-2024-1593 / CVE-2024-1593 / GHSA-f42m-mvfv-cgw5

More information

Details

A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. This vulnerability allows for arbitrary data smuggling into the 'params' part of the URL, enabling attacks similar to those described in previous reports but utilizing the ';' character for parameter smuggling. Successful exploitation could lead to unauthorized information disclosure or server compromise.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-1593
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/dbdc6bd6-d09a-46f2-9d9c-5138a14b6e31

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLFlow Path Traversal Vulnerability

BIT-mlflow-2023-6975 / CVE-2023-6975 / GHSA-hh8p-p8mp-gqhm

More information

Details

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

Severity

• CVSS Score: 9.8 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6975
• https://github.com/mlflow/mlflow/commit/b9ab9ed77e1deda9697fe472fb1079fd428149ee
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/029a3824-cee3-4cf1-b260-7138aa539b85

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow Command Injection vulnerability

BIT-mlflow-2023-6940 / CVE-2023-6940 / GHSA-hvc6-42vf-jhf8

More information

Details

with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6940
• https://github.com/mlflow/mlflow/pull/10676
• https://github.com/mlflow/mlflow/commit/5139b1087d686fa52e2b087e09da66aff86297b1
• https://github.com/mlflow/mlflow/commit/a98a341a7222f894b7735db575ad9311ecaba4e3
• https://github.com/mlflow/mlflow
• https://github.com/mlflow/mlflow/commits/v2.9.2
• https://huntr.com/bounties/c6f59480-ce47-4f78-a3dc-4bd8ca15029c

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow vulnerable to Path Traversal

BIT-mlflow-2024-1594 / CVE-2024-1594 / GHSA-m49c-5c52-6696

More information

Details

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the artifact_location parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component # in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-1594
• https://github.com/mlflow/mlflow
• https://github.com/mlflow/mlflow/blob/b929a3e727dc48a1eb19b7e954b7897ac09ad3ec/mlflow/utils/uri.py#L246
• https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLflow Local File Disclosure Vulnerability

BIT-mlflow-2023-6977 / CVE-2023-6977 / GHSA-qg8p-32gr-gh6x

More information

Details

This vulnerability enables malicious users to read sensitive files on the server.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6977
• https://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Path traversal in MLflow

BIT-mlflow-2023-6753 / CVE-2023-6753 / GHSA-v945-r3rc-6fjm / PYSEC-2023-309

More information

Details

Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6753
• https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3cc808016869ee8de4
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-309.yaml
• https://huntr.com/bounties/b397b83a-527a-47e7-b912-a12a17a6cfb4

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

MLflow Path Traversal Vulnerability

BIT-mlflow-2023-6976 / CVE-2023-6976 / GHSA-wv8q-4f85-2p8p

More information

Details

This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6976
• https://github.com/mlflow/mlflow/commit/5044878da0c1851ccfdd5c0a867157ed9a502fbc
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/2408a52b-f05b-4cac-9765-4f74bac3f20f

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2023-6909 / CVE-2023-6909 / GHSA-5r3q-93q3-f978 / PYSEC-2023-252

More information

Details

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850
• https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2023-6831 / CVE-2023-6831 / GHSA-554w-xh4j-8w64 / PYSEC-2023-253

More information

Details

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.1 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

• https://huntr.com/bounties/0acdd745-0167-4912-9d5c-02035fe5b314
• https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2023-6709 / CVE-2023-6709 / GHSA-cxfr-5q3r-2rc2 / PYSEC-2023-281

More information

Details

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

• https://huntr.com/bounties/9e4cc07b-6fff-421b-89bd-9445ef61d34d
• https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2023-6753 / CVE-2023-6753 / GHSA-v945-r3rc-6fjm / PYSEC-2023-309

More information

Details

Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.

Severity

• CVSS Score: 8.8 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://huntr.com/bounties/b397b83a-527a-47e7-b912-a12a17a6cfb4
• https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3cc808016869ee8de4

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution

BIT-mlflow-2024-27133 / CVE-2024-27133 / GHSA-3v79-q7ph-j75h / PYSEC-2024-241

More information

Details

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.

Severity

• CVSS Score: 9.6 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-27133
• https://github.com/mlflow/mlflow/pull/10893
• https://github.com/mlflow/mlflow/commit/c43823750bffa5b6abcc086683b15a068513b67b
• https://github.com/mlflow/mlflow/commit/cfa71879a884cc3520e23ccab998c9aa78fdf2b1
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-241.yaml
• https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Cross-site Scripting in MLFlow

BIT-mlflow-2024-27132 / CVE-2024-27132 / GHSA-6749-m5cp-6cg7 / PYSEC-2024-240

More information

Details

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook.

The vulnerability stems from lack of sanitization over template variables.

Severity

• CVSS Score: 9.6 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-27132
• https://github.com/mlflow/mlflow/pull/10873
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-240.yaml
• https://research.jfrog.com/vulnerabilities/mlflow-untrusted-recipe-xss-jfsa-2024-000631930

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow vulnerable to Path Traversal

BIT-mlflow-2024-3573 / CVE-2024-3573 / GHSA-hq88-wg7q-gp4g / PYSEC-2024-243

More information

Details

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.

Severity

• CVSS Score: 9.3 / 10 (Critical)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-3573
• https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-243.yaml
• https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-27132 / CVE-2024-27132 / GHSA-6749-m5cp-6cg7 / PYSEC-2024-240

More information

Details

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook.

The vulnerability stems from lack of sanitization over template variables.

Severity

• CVSS Score: 9.6 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

• https://research.jfrog.com/vulnerabilities/mlflow-untrusted-recipe-xss-jfsa-2024-000631930/
• https://github.com/mlflow/mlflow/pull/10873

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-27133 / CVE-2024-27133 / GHSA-3v79-q7ph-j75h / PYSEC-2024-241

More information

Details

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.

Severity

• CVSS Score: 9.6 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

• https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/
• https://github.com/mlflow/mlflow/pull/10893

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-3573 / CVE-2024-3573 / GHSA-hq88-wg7q-gp4g / PYSEC-2024-243

More information

Details

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.

Severity

• CVSS Score: 9.3 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

References

• https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c
• https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

MLflow allows low privilege users to delete any artifact

BIT-mlflow-2024-4263 / CVE-2024-4263 / GHSA-p4jx-q62p-x5jr / PYSEC-2024-51

More information

Details

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.

Severity

• CVSS Score: 5.4 / 10 (Medium)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-4263
• https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-51.yaml
• https://huntr.com/bounties/bfa116d3-2af8-4c4a-ac34-ccde7491ae11

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-4263 / CVE-2024-4263 / GHSA-p4jx-q62p-x5jr / PYSEC-2024-51

More information

Details

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.

Severity

Unknown

References

• https://huntr.com/bounties/bfa116d3-2af8-4c4a-ac34-ccde7491ae11
• https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

Undefined Behavior in mlflow

BIT-mlflow-2024-3099 / CVE-2024-3099 / GHSA-8f8q-q2j7-7j2m

More information

Details

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same name, potentially causing an authenticated user to become a victim by using the poisoned model. The issue stems from inadequate validation of model names, allowing for the creation of models with URL-encoded names that are treated as distinct from their URL-decoded counterparts.

Severity

• CVSS Score: 5.4 / 10 (Medium)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-3099
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Local File Inclusion in mlflow

BIT-mlflow-2024-2928 / CVE-2024-2928 / GHSA-j46q-5pxx-8vmw / PYSEC-2024-242

More information

Details

A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-2928
• https://github.com/mlflow/mlflow/commit/96f0b573a73d8eedd6735a2ce26e08859527be07
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-242.yaml
• https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024-2928 / CVE-2024-2928 / GHSA-j46q-5pxx-8vmw / PYSEC-2024-242

More information

Details

A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298
• https://github.com/mlflow/mlflow/commit/96f0b573a73d8eedd6735a2ce26e08859527be07

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

mlflow Path Traversal vulnerability

BIT-mlflow-2024-1483 / CVE-2024-1483 / GHSA-f82r-jj5r-6g97

More information

Details

A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifact_location' and 'source' parameters, using a local URI with '#' instead of '?', an attacker can traverse the server's directory structure. The issue occurs due to insufficient validation of user-supplied input in the server's handlers.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-1483
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/52a3855d-93ff-4460-ac24-9c7e4334198d

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

mlflow vulnerable to Path Traversal

BIT-mlflow-2024-1558 / CVE-2024-1558 / GHSA-j62r-wxqq-f3gf

More information

Details

A path traversal vulnerability exists in the _create_model_version() function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the _validate_non_local_source_contains_relative_paths(source) function's checks, allowing for arbitrary file read access on the server. The issue arises from the handling of unquoted URL characters and the subsequent misuse of the original source value for model version creation, leading to the exposure of sensitive files when interacting with the /model-versions/get-artifact handler.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-1558
• https://github.com/mlflow/mlflow
• https://huntr.com/bounties/7f4dbcc5-b6b3-43dd-b310-e2d0556a8081

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

BIT-mlflow-2024