id: PYSEC-2024-51
modified: 2024-05-16T11:19:52.866536Z
published: 2024-05-16T09:15:00Z
aliases:
- CVE-2024-4263
- GHSA-p4jx-q62p-x5jr
details: A broken access control vulnerability exists in mlflow/mlflow versions before
  2.10.1, where low privilege users with only EDIT permissions on an experiment can
  delete any artifacts. This issue arises due to the lack of proper validation for
  DELETE requests by users with EDIT permissions, allowing them to perform unauthorized
  deletions of artifacts. The vulnerability specifically affects the handling of artifact
  deletions within the application, as demonstrated by the ability of a low privilege
  user to delete a directory inside an artifact using a DELETE request, despite the
  official documentation stating that users with EDIT permission can only read and
  update artifacts, not delete them.
affected:
- package:
    ecosystem: PyPI
    name: mlflow
    purl: pkg:pypi/mlflow
  ranges:
  - type: GIT
    events:
    - introduced: "0"
    - fixed: b43e0e3de5b500554e13dc032ba2083b2d6c94b8
    repo: https://github.com/mlflow/mlflow
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.10.1
  versions:
  - 0.0.1
  - 0.1.0
  - 0.2.0
  - 0.2.1
  - 0.3.0
  - 0.4.0
  - 0.4.1
  - 0.4.2
  - 0.5.0
  - 0.5.1
  - 0.5.2
  - 0.6.0
  - 0.7.0
  - 0.8.0
  - 0.8.1
  - 0.8.2
  - 0.9.0
  - 0.9.0.1
  - 0.9.1
  - 1.0.0
  - 1.1.0
  - 1.1.1.dev0
  - 1.10.0
  - 1.11.0
  - 1.12.0
  - 1.12.1
  - "1.13"
  - 1.13.1
  - 1.14.0
  - 1.14.1
  - 1.15.0
  - 1.16.0
  - 1.17.0
  - 1.18.0
  - 1.19.0
  - 1.2.0
  - 1.20.0
  - 1.20.1
  - 1.20.2
  - 1.21.0
  - 1.22.0
  - 1.23.0
  - 1.23.1
  - 1.24.0
  - 1.25.0
  - 1.25.1
  - 1.26.0
  - 1.26.1
  - 1.27.0
  - 1.28.0
  - 1.29.0
  - 1.3.0
  - 1.30.0
  - 1.30.1
  - 1.4.0
  - 1.5.0
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.7.2
  - 1.8.0
  - 1.9.0
  - 1.9.1
  - 2.0.0
  - 2.0.0rc0
  - 2.0.1
  - 2.1.0
  - 2.1.1
  - 2.10.0
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
  - 2.4.2
  - 2.5.0
  - 2.6.0
  - 2.7.0
  - 2.7.1
  - 2.8.0
  - 2.8.1
  - 2.9.0
  - 2.9.1
  - 2.9.2
references:
- type: WEB
  url: https://huntr.com/bounties/bfa116d3-2af8-4c4a-ac34-ccde7491ae11
- type: FIX
  url: https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8
- type: ADVISORY
  url: https://github.com/advisories/GHSA-p4jx-q62p-x5jr