{"id":"CVE-2025-1473","published":"2025-03-20T10:10:20Z","modified":"2025-03-20T18:22:59Z","title":"CSRF in mlflow/mlflow","vendor":"mlflow","product":"mlflow/mlflow","tier":"tail","description":{"text":"A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.","provenance":"source","from":"CVE.org"},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00221,"percentile":0.12674,"provenance":"source"},"cwes":[{"id":"CWE-352","name":"Cross-Site Request Forgery"}],"references":[{"url":"https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45","tags":[]},{"url":"https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628","tags":[]}],"priority":{"score":6.3,"factors":[{"name":"EPSS percentile","points":2.53},{"name":"CVSS severity","points":3.78}]},"vendorSlug":"mlflow","affectedVersions":[{"vendor":"mlflow","product":"mlflow/mlflow","versions":[">= unspecified, < 2.20.2"]}],"affected":[{"ecosystem":"PyPI","package":"mlflow","vulnerableRanges":[">=2.17.0, <2.20.3"],"patched":["2.20.3"],"from":["GHSA-969w-gqqr-g6j3","PYSEC-2026-1646"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-6808","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-mlflow-mlflow-cve-2023-2780","parents":[{"from":"CVE-2023-2780","to":"CVE-2025-1473","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/environment_variables.py"],"commits":["https://github.com/mlflow/mlflow/commit/fae77a525dd908c56d6204a4cef1c1c75b4e9857","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"shared function","functions":["get"]}]},{"from":"CVE-2023-3765","to":"CVE-2025-1473","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/pyfunc/scoring_server/__init__.py"],"commits":["https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"rarely changed file"}]},{"from":"CVE-2023-4033","to":"CVE-2025-1473","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/pyfunc/scoring_server/__init__.py"],"commits":["https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"rarely changed file"}]},{"from":"CVE-2024-3573","to":"CVE-2025-1473","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/environment_variables.py"],"commits":["https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"shared function","functions":["get"]}]}],"children":[{"from":"CVE-2025-1473","to":"CVE-2025-11200","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:mlflow","fromFixed":"2.20.3","toFixed":"2.22.0rc0","daysApart":223},{"kind":"same-code","provenance":"machine","files":["mlflow/utils/validation.py"],"commits":["https://github.com/mlflow/mlflow/commit/1f74f3f24d8273927b8db392c23e108576936c54","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"rarely changed file"}]},{"from":"CVE-2025-1473","to":"CVE-2025-11201","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/environment_variables.py"],"commits":["https://github.com/mlflow/mlflow/commit/5f98ff98659dddb188591ecf6b10a4e276a0dba7","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"shared function","functions":["get"]}]},{"from":"CVE-2025-1473","to":"CVE-2025-14279","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["mlflow/environment_variables.py"],"commits":["https://github.com/mlflow/mlflow/commit/b0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628"],"basis":"shared function","functions":["get"]}]}],"packageHistory":[{"cve":"CVE-2024-27134","published":"2024-11-25","fixed":"2.16.0","kev":false},{"cve":"CVE-2024-8859","published":"2025-03-20","fixed":"2.17.0rc0","kev":false},{"cve":"CVE-2025-1474","published":"2025-03-20","fixed":"2.19.0","kev":false,"link":{"from":"CVE-2025-1474","to":"CVE-2025-1473","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:mlflow","fromFixed":"2.19.0","toFixed":"2.20.3","daysApart":0}]}},{"cve":"CVE-2025-1473","published":"2025-03-20","fixed":"2.20.3","kev":false},{"cve":"CVE-2025-11200","published":"2025-10-29","fixed":"2.22.0rc0","kev":false},{"cve":"CVE-2025-11201","published":"2025-10-29","fixed":"3.0.0","kev":false},{"cve":"CVE-2025-52967","published":"2025-06-23","fixed":"3.1.0","kev":false}],"package":"PyPI:mlflow"}}