Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.
References
| Link | Resource |
|---|---|
| https://github.com/mlflow/mlflow/pull/10893 | Issue Tracking Patch |
| https://github.com/mlflow/mlflow/pull/10893 | Issue Tracking Patch |
| https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/ | Exploit Third Party Advisory |
| https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/ | Exploit Third Party Advisory |
Configurations
History
22 Jan 2025, 13:46
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Lfprojects
Lfprojects mlflow |
|
| CWE | ||
| References | () https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/ - Exploit, Third Party Advisory | |
| References | () https://github.com/mlflow/mlflow/pull/10893 - Issue Tracking, Patch | |
| CPE | cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.6 |
23 Feb 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-23 22:15
Updated : 2025-01-22 13:46
NVD link : CVE-2024-27133
Mitre link : CVE-2024-27133
JSON object : View
Products Affected
lfprojects
- mlflow
CWE
No CWE.