CVE-2023-43472

Summary

CVE-2023-43472 is a vulnerability affecting MLFlow versions 2.8.1 and prior. This issue enables a remote attacker to access sensitive data through a specially crafted request to the MLFlow REST API, potentially resulting in information disclosure. This vulnerability could lead to significant security risks if exploited, making it crucial for users to update to the latest MLFlow version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.