Deserialization of untrusted data... CVE-2024-37060

- AV AC AU C I A
发布: 2024-06-04
修订: 2025-02-03

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息