Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-6940

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hvc6-42vf-jhf8

mlflow Command Injection vulnerability with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.

gitlab/pypi/mlflow/CVE-2023-6940

Improper Neutralization of Special Elements used in a Command ('Command Injection') with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.