1.28.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-16	CVE-2023-6015	Path Traversal vulnerability in Lfprojects Mlflow MLflow allowed arbitrary files to be PUT onto the server. network low complexity lfprojects CWE-22	7.5
2023-08-01	CVE-2023-4033	OS Command Injection vulnerability in Lfprojects Mlflow OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. local low complexity lfprojects CWE-78	7.8
2023-07-19	CVE-2023-3765	Absolute Path Traversal vulnerability in Lfprojects Mlflow Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. network low complexity lfprojects CWE-36 critical	10.0
2023-05-17	CVE-2023-2780	Path Traversal: '..filename' vulnerability in Lfprojects Mlflow Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. network low complexity lfprojects CWE-29 critical	9.8
2023-05-11	CVE-2023-30172	Path Traversal vulnerability in Lfprojects Mlflow A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter. network low complexity lfprojects CWE-22	7.5
2023-04-28	CVE-2023-2356	Relative Path Traversal vulnerability in Lfprojects Mlflow Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. network low complexity lfprojects CWE-23	7.5
2023-03-24	CVE-2023-1177	Path Traversal: '..filename' vulnerability in Lfprojects Mlflow Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. network low complexity lfprojects CWE-29 critical	9.8