Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6974

Fixed upstream EPSS 2%CVSS 8.6

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.

Published 2023-12-20 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.9.2