CVE-2023-1177

MLflow red team toolsuite

Snaike-MLflow Snaike: ProtectAI's Python AI red teaming toolsuite MLflow: Platform for the machine learning lifecycle CVE-2023-1177 is an LFI/RFI vulnerability in MLflow <223 exploitable with the MLFIflow tool It allows an unauthenticated, remote attacker to read arbitrary files such as SSH and AWS keys as well as remote files MLflow is vulnerable to this out of

CVE for 2023

CVE-2023-1177 (MLFlow Path Traversal) About MLflow MLflow is an open-source platform for managing the end-to-end machine learning lifecycle Primary Functions: MLflow tackles four primary functions: Tracking experiments to record and compare parameters and results (MLflow Tracking) Packaging ML code in a reusable, reproducible form in order to share with other data scientists

Learn more things, not suck all things

CVE-2023-1177 Learn more things, not suck all things