UpHeron
All vulnerabilities

Servers and applications

CVE-2023-1176

Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs

Severity
Low 3.3
Published
24 Mar 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.2.1, 2.2.2
Also known as
GHSA-wp72-7hj9-5265
Sources
NVD, Project advisories (GitHub)

Affected software

SoftwareAffected versions
MLflowServers and applications · cpe:a:lfprojects:mlflow
  • Every version before 2.2.2
MLflowServers and applications · github:mlflow/mlflow
  • Every version before 2.2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-1176
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-1176
  • GitHub Advisory Database https://github.com/advisories/GHSA-wp72-7hj9-5265
  • github.com https://github.com/mlflow/mlflow/security/advisories/GHSA-wp72-7hj9-5265