References https://nvd.nist.gov/vuln/detail/CVE-2023-3765 https://github.com/advisories/GHSA-fmxj-6h9g-6vw3 https://cve.imfht.com/detail/CVE-2023-3765 https://security.snyk.io/vuln/SNYK-PYTHON-MLFLOW-5781352 https://avd.aliyun.com/detail?id=AVD-2023-3765 https://www.broadcom.com/support/security-center/protection-bulletin/mlflow-cve-2023-3765-vulnerability-under-active-exploitation https://pages.nist.gov/BF/info/bfvul/bfcve-2023-3765/ https://pentest-tools.com/vulnerabilities-exploits/mlflow-absolute-path-traversal_1608 https://www.resolvedsecurity.com/vulnerability-catalog/CVE-2023-3765 https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1449.html/
Related VulnerabilitiesMLflow /api/2.0/mlflow/webhooks 服务器端请求伪造漏洞(CVE-2026-64849)PoCCVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassPoCCVE-2026-2614: MLflow <= 3.9.0 - Arbitrary File ReadMLflow 存在任意文件读取漏洞(CVE-2026-2614)PoCCVE-2026-2652: MLflow < 3.10.0 - Authentication Bypass on FastAPI RoutesMLflow /ajax-api/3.0/jobs/search 权限绕过漏洞 (CVE-2026-2652)PoCCVE-2026-0545: MLflow Job API - Authentication BypassPoCCVE-2023-1177: Mlflow <2.2.1 - Local File InclusionPoCCVE-2023-2356: Mlflow <2.3.0 - Local File InclusionPoCCVE-2023-2780: Mlflow <2.3.1 - Local File Inclusion BypassPoCCVE-2023-3765: MLflow Absolute Path TraversalPoCCVE-2023-43472: MLFlow < 2.8.1 - Sensitive Information DisclosurePoCCVE-2023-6018: Mlflow - Arbitrary File Write