PT-2024-4085 · Unknown+1 · Jupyter Notebook+1

Uriya Yavnieli · Published 2024-02-23 · Updated 2025-01-22 · CVE-2024-27132

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 2.4.1

Description The issue stems from insufficient sanitization in MLflow, leading to cross-site scripting (XSS) when running an untrusted recipe. This can be escalated to a client-side remote code execution (RCE) when running the recipe via Jupyter Notebook. The vulnerability is due to a lack of sanitization over template variables.

Recommendations To protect against remote code execution, update to version 2.4.1. As a temporary workaround, consider restricting the use of untrusted recipes in Jupyter Notebook until the issue is resolved. Avoid running untrusted recipes to minimize the risk of exploitation.

Exploit

Fix

RCE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-04534

BIT-MLFLOW-2024-27132

CVE-2024-27132

GHSA-6749-M5CP-6CG7

PYSEC-2024-240

Affected Products

Jupyter Notebook

Mlflow

References · 29

• 🔥 https://research.jfrog.com/vulnerabilities/mlflow-untrusted-recipe-xss-jfsa-2024-000631930 · Exploit
• https://github.com/mlflow/mlflow/pull/10873 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-27132 · Security Note
• https://osv.dev/vulnerability/GHSA-6749-m5cp-6cg7 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-240 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mlflow-2024-27132 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27132 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04534 · Security Note
• https://github.com/mlflow/mlflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-240.yaml · Note
• https://twitter.com/IdrisRasras/status/1828018401681539363 · Twitter Post
• https://twitter.com/Eth1calHackrZ/status/1867430496830996522 · Twitter Post
• https://t.me/cvenotify/108203 · Telegram Post
• https://twitter.com/transilienceai/status/1829575660081209417 · Twitter Post
• https://twitter.com/cyraxsecurity/status/1865250353593159883 · Twitter Post