CVE-2023-6015
2 advisories.
PyPI/mlflow CVE-2023-6015: critical 10
MLflow allowed arbitrary files to be PUT onto the server
Action: Upgrade mlflow to 2.8.1 or later.
pip install mlflow==2.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.1 | - |
Fixed versions
| 2.8.1 |
Sources
- osv: GHSA-f798-qm4r-23r5
- https://nvd.nist.gov/vuln/detail/CVE-2023-6015
- https://github.com/mlflow/mlflow/pull/10330
- https://github.com/mlflow/mlflow/commit/cf83dad4df26dd4a850622fe8a51ccab1471a5e7
- https://github.com/mlflow/mlflow
- https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3
CVE-2023-6015 · published · modified · JSON
PyPI/mlflow CVE-2023-6015: critical 10
MLflow allowed arbitrary files to be PUT onto the server
Action: Upgrade mlflow to 2.8.1 or later.
pip install mlflow==2.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.1 | - |
Fixed versions
| 2.8.1 |
Sources
- osv: PYSEC-2026-420
- https://nvd.nist.gov/vuln/detail/CVE-2023-6015
- https://github.com/mlflow/mlflow/pull/10330
- https://github.com/mlflow/mlflow/commit/cf83dad4df26dd4a850622fe8a51ccab1471a5e7
- https://github.com/mlflow/mlflow
- https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3
- https://pypi.org/project/mlflow
- https://github.com/advisories/GHSA-f798-qm4r-23r5
CVE-2023-6015 · published · modified · JSON