MLflow vulnerability enables remote machine learning model theft and poisoning

MLflow vulnerability enables remote machine learning model theft and poisoning

The article reveals how simple HTTP requests bypass cross-origin checks, enabling attacks without requiring server responses. This is critical for open data, as it highlights security vulnerabilities in data platforms that may inadvertently expose sensitive information through these unverified cross-origin interactions.

Source: csoonline.com
Published on 2023-12-22