ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.
MLflow privilege escalation via excessive directory permissions in spark_udf
MLflow had a privilege escalation vulnerability when using spark_udf due to excessive directory permissions. The vulnerability was patched in a pull request on January 23, 2024.
AII-1002-531172 sources ↓
What happened
MLflow contained a privilege escalation vulnerability when using spark_udf due to excessive directory permissions.
Governance controls
A patch fixing the privilege escalation was proposed in pull request #10874 on January 23, 2024.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.