CVE-2023-6709

Severity

CRITICAL

CVSS

10.0

EPSS

0.00937

Risk score

40.33

CISA KEV

PoC

Published

2023-12-12

Modified

2024-10-08

First seen

2026-08-07

Aliases

EUVD-2023-0162, GHSA-CXFR-5Q3R-2RC2, PYSEC-2023-281

Products

mlflow:mlflow/mlflow unspecified <2.9.2

Sources

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.