CVE-2023-6974
Fixed upstream EPSS 2%CVSS 8.6
A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.
Products: mlflow/mlflow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | mlflow | 2.9.2 |