https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 09:54:15 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-118628 <p>MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the get-artifacts function. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the server. Was ZDI-CAN-28192.</p> <p>MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the get-artifacts function. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the server. Was ZDI-CAN-28192.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118628 https://db.gcve.eu/vuln/ghsa-vf3g-89fc-wcmp <p>MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the get-artifacts function. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the server. Was ZDI-CAN-28192.</p> <p>MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the get-artifacts function. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the server. Was ZDI-CAN-28192.</p> https://db.gcve.eu/vuln/ghsa-vf3g-89fc-wcmp https://db.gcve.eu/vuln/wid-sec-w-2026-4316 <p>Ein Angreifer kann mehrere Schwachstellen in MLflow ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen und vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MLflow ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen und vertrauliche Informationen offenzulegen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4316