Description (CNA)
gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| lfprojects / MLflow | affected 0 before 3.1.0 |
CWE
CWE-918
References
- https://github.com/mlflow/mlflow/pull/15970
- https://github.com/mlflow/mlflow/issues/15944
- https://github.com/mlflow/mlflow/releases/tag/v3.1.0
ADP enrichment
No English description supplied.
No references supplied.