← Database

CVE-2025-1473

HIGH CVSS: 7.1 Published: 2025-03-20 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.

Affected Platforms

Lfprojects Mlflow

Weakness Type

CWE-352

References