Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-52967

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

VectorNETWORK

PublishedJun 23, 2025, 15:15

Published Bycve@mitre.org

Base Score

Score5.8

Package (Ecosystem)IntroducedFixedLimit

mlflow(PyPI)3.0.0rc03.1.0N/A

mlflow(PyPI)02.22.2N/A

CWE-918

Base Score

5.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK