CVE-2023-6568

    Dashboard / Vulnerabilities / CVE-2023-6568

    CVE-2023-6568

    Published: 7 Dec 2023Last Modified: 12 Aug 2026

    Summary: Reflected XSS via Content-Type Header in mlflow/mlflow

    Details: A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.

    References: https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6568.json, https://nvd.nist.gov/vuln/detail/CVE-2023-6568, https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -28ff3f94994941e038f2172c6484b65dc4db6ca1

    Affected versions

    v2.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-6568 | CVE-DB