MLflowGHSA-vwhf-3v6x-wff8
Cross-site Scripting (XSS) in MLflow
Medium6.5CVE-2023-6568 · Published Dec 7, 2023 · updated Apr 16, 2024
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mlflow PyPI | < 2.9.0 | 2.9.0 |
Details and references
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-79
- Also known as
- BIT-mlflow-2023-6568, CVE-2023-6568, PYSEC-2023-260
More MLflow advisories
All MLflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Dec 52023 | Information exposure in MLflow CVE-2023-43472High7.5fixed in 2.9.0 | High7.5 | 2.9.0 |
| Dec 122023 | Jinja2 template injection in mlflow CVE-2023-6709High8.8fixed in 2.9.2 | High8.8 | 2.9.2 |
| Dec 132023 | Path traversal in MLflow CVE-2023-6753High8.8fixed in 2.9.2 | High8.8 | 2.9.2 |
| Dec 152023 | Path traversal in MLflow CVE-2023-6831Critical10.0fixed in 2.9.2 | Critical10.0 | 2.9.2 |
| Dec 192023 | mlflow Command Injection vulnerability CVE-2023-6940High8.8fixed in 2.9.2 | High8.8 | 2.9.2 |
| Dec 202023 | MLflow Server-Side Request Forgery (SSRF) CVE-2023-6974Critical9.8fixed in 2.9.2 | Critical9.8 | 2.9.2 |