CVE-2023-6977

This vulnerability enables malicious users to read sensitive files on the server.

Score

CVSS 3.0 10.0 Critical

Status

Modified - security@huntr.dev

Published

2023-12-20

Last modified

2024-08-02

Weaknesses

CWE-29

Affected products

• Mlflow (Lfprojects)
• Mlflowmlflow (Mlflow)

References

• https://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c
• https://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf