Critical flaw in AI testing framework MLflow can lead to server and data compromise – .:: CHASLES CORP. ::.

critical-flaw-in-ai-testing-framework-mlflow-can-lead-to-server-and-data-compromise

_ 25 mars 2023_ _ 0 Comments

Critical flaw in AI testing framework MLflow can lead to server and data compromise

The vulnerability found by Dan McInerney is tracked as CVE-2023-1177 and is rated 10 (critical) on the CVSS scale. It is described as a local and remote file inclusion (LFI/RFI) via the API.

8

Author