leadership1 distinct publisher
MLflow's default server hands out cloud credentials to anyone who asks nicely
A GitHub advisory describes an unauthenticated, full-read SSRF in the default MLflow tracking server that reaches the cloud metadata endpoint and reflects the response back to the caller.
Publishers:github.com
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap+16
- Incentives42
- Confidence68