Mlflow

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-11	CVE-2023-30172	Path Traversal vulnerability in Lfprojects Mlflow A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter. network low complexity lfprojects CWE-22	7.5
2023-04-28	CVE-2023-2356	Unspecified vulnerability in Lfprojects Mlflow Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. network low complexity lfprojects	7.5
2023-03-24	CVE-2023-1176	Unspecified vulnerability in Lfprojects Mlflow Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. local low complexity lfprojects	3.3
2023-03-24	CVE-2023-1177	Unspecified vulnerability in Lfprojects Mlflow Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. network low complexity lfprojects critical	9.8
2022-02-23	CVE-2022-0736	Unspecified vulnerability in Lfprojects Mlflow Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. network low complexity lfprojects	7.5