CVE-2024-3099

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same name, potentially causing an authenticated user to become a victim by using the poisoned model. The issue stems from inadequate validation of model names, allowing for the creation of models with URL-encoded names that are treated as distinct from their URL-decoded counterparts.

• CWE-475

• https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24aExploit, Issue Tracking, Third Party Advisory
• https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24aExploit, Issue Tracking, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30983SQL Injection vulnerability in phpgurukul Cyber Cafe Managem…7.3
• CVE-2024-30985SQL Injection vulnerability in "B/W Dates Reports" page in p…9.8
• CVE-2024-30986Cross Site Scripting vulnerability in /edit-services-details…6.5
• CVE-2024-30987Cross Site Scripting vulnerability in /bwdates-reports-ds.ph…6.8
• CVE-2024-30988Cross Site Scripting vulnerability in /search-invoices.php o…6.8
• CVE-2024-30989Cross Site Scripting vulnerability in /edit-client-details.p…5.4
• CVE-2024-30990SQL Injection vulnerability in the "Invoices" page in phpgur…9.8
• CVE-2024-30998SQL Injection vulnerability in PHPGurukul Men Salon Manageme…9.8
• CVE-2024-3100A potential buffer overflow vulnerability was reported in so…6.7
• CVE-2024-31002Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 al…9.8
• CVE-2024-31003Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 al…8.8
• CVE-2024-31004An issue in Bento4 Bento v.1.6.0-641 allows a remote attacke…9.8