MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Command Injection in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Absolute Path Traversal in mlflow/mlflow

Missing Authentication for Critical Function in mlflow/mlflow

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Path Traversal: '\..\filename'

Server-Side Request Forgery (SSRF)

MLflow Authentication Bypass

MLflow Arbitrary File Write

Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

Improper Origin Validation in mlflow/mlflow

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Missing Authorization Validation in mlflow/mlflow