CVE-2023-6018 (published 2023-11-16T16:05:14.579Z)
An attacker can overwrite any file on the server hosting MLflow without any authentication.
Affected products: Vendor: mlflow
Product: mlflow/mlflow
Versions: unspecified