github_osv/GHSA-hvc6-42vf-jhf8
mlflow Command Injection vulnerability
with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.
gitlab/pypi/mlflow/CVE-2023-6940
Improper Neutralization of Special Elements used in a Command ('Command Injection')
with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.