CVE-2023-6568

A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.

• CWE-79
• CWE-79

• https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1Patch
• https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709Exploit, Third Party Advisory
• https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1Patch
• https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709Exploit, Third Party Advisory

Published

Dec 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6562JPX Fragment List (flst) box vulnerability in Kakadu 7.9 all…7.5
• CVE-2023-6563An unconstrained memory consumption vulnerability was discov…7.7
• CVE-2023-6564An issue has been discovered in GitLab EE Premium and Ultima…6.5
• CVE-2023-6565The InfiniteWP Client plugin for WordPress is vulnerable to …5.9
• CVE-2023-6566Business Logic Errors in GitHub repository microweber/microw…6.5
• CVE-2023-6567The LearnPress plugin for WordPress is vulnerable to time-ba…7.5
• CVE-2023-6569External Control of File Name or Path in h2oai/h2o-38.2
• CVE-2023-6570Server-Side Request Forgery (SSRF) in kubeflow/kubeflow6.5
• CVE-2023-6571Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow6.1
• CVE-2023-6572Command Injection in GitHub repository gradio-app/gradio pri…8.1
• CVE-2023-6573HPE OneView may have a missing passphrase during restore.5.5
• CVE-2023-6574A vulnerability was found in Byzoro Smart S20 up to 20231120…8.8