Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-6974

Server-Side Request Forgery (SSRF)

Description

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mlflow mlflow/mlflow

  • unspecified to < 2.9.2affected

References