{"action":"Upgrade mlflow to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"mlflow","cve_ids":["CVE-2023-1176"],"ecosystem":"PyPI","epss":0.00583,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-wp72-7hj9-5265","id":"tcs_01M5KG2J3ZJHNJAJWYJM7MDSX3","modified_at":"2024-09-25T18:02:23.373121Z","published_at":"2023-03-24T22:01:15Z","references":["https://osv.dev/vulnerability/GHSA-wp72-7hj9-5265","https://github.com/mlflow/mlflow/security/advisories/GHSA-wp72-7hj9-5265","https://nvd.nist.gov/vuln/detail/CVE-2023-1176","https://github.com/mlflow/mlflow/commit/63ef72aa4334a6473ce7f889573c92fcae0b3c0d","https://github.com/mlflow/mlflow","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-28.yaml","https://huntr.dev/bounties/ae92f814-6a08-435c-8445-eec0ef4f1085"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-wp72-7hj9-5265","url":"https://osv.dev/vulnerability/GHSA-wp72-7hj9-5265"}],"summary":"Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs"}