lfprojects
1 Product
19 CVEs
CVE Severity Distribution (All Time)
Critical
High
Medium
Low
Timeline Overview
Last 30 Days
0 CVEs
Last 6 Months
0 CVEs
Last Year
1 CVE
Products
View allRecent CVEs
View allExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacke…
Related Security News
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
2025-05-15 15:41
Offsec.com
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences. The po…