CVE-2025-1473 — CSRF in mlflow/mlflow
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new …
Published: 2025-03-20 · CVSS: 5.4 · CVSS 3.0
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7