CVE-2023-6014 (published 2023-11-16T21:07:36.577Z)
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
Affected products: Vendor: mlflow
Product: mlflow/mlflow
Versions: unspecified